nixos/manifests/helm/tailscale.yaml

apiVersion: v1
kind: Namespace
metadata:
  name: tailscale
---
apiVersion: source.toolkit.fluxcd.io/v1
kind: HelmRepository
metadata:
  name: tailscale
  namespace: tailscale
spec:
  interval: "24h"
  url: "https://pkgs.tailscale.com/helmcharts"
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: tailscale
  namespace: tailscale
spec:
  interval: 10m
  dependsOn:
    - name: external-secrets
      namespace: external-secrets
  chart:
    spec:
      chart: tailscale-operator
      version: "1.96.5"
      sourceRef:
        kind: HelmRepository
        name: tailscale
      interval: "1h"
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: operator-oauth
  namespace: tailscale
spec:
  target:
    name: operator-oauth
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        client_id: |-
          {{ .username }}
        client_secret: |-
          {{ .password }}
  data:
    - secretKey: username
      sourceRef:
        storeRef:
          name: bitwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: ffa188a4-63b2-4926-99f0-b33b0021a4f4
        property: username
    - secretKey: password
      sourceRef:
        storeRef:
          name: bitwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: ffa188a4-63b2-4926-99f0-b33b0021a4f4
        property: password