secrets: add IPA keytab for tailscale-router

2026-07-28 09:15:21 +10:00
parent 01ee261cf8
commit 1cbe80c0ca
2 changed files with 36 additions and 0 deletions
@@ -135,3 +135,13 @@ creation_rules:
          - *baremetal-gui
          - *linode-gui
          - *proxmox-gui
+
+  # Host keytab for tailscale-router FreeIPA enrollment (binary sops file).
+  # Generated by scripts/ipa/create-nixos-ipa-host-account.sh.
+  - path_regex: secrets/tailscale-router\.keytab$
+    key_groups:
+      - age:
+          - *admin
+          - *lxc-tailscale-router
+          - *proxmox-tailscale-router
+          - *linode-tailscale-router