feat(homelab): fixing cf tunnels, authentik and tailscale!

hosts/sobotka/modules.nix

@@ -3,8 +3,8 @@
     boot = {
       kernel = {
         variant = "latest";
-        hardware = [ "amd" ];
-        extraKernelParams = [ ];
+        hardware = ["amd"];
+        extraKernelParams = [];
       };
       loader = {
         default = {
@@ -213,6 +213,9 @@
         scheduler = "scx_lavd";
         flags = "--performance";
       };
+      tailscale = {
+        enable = true;
+      };
       udisks = {
         enable = true;
       };

hosts/sobotka/server.nix

@@ -8,16 +8,9 @@
     uid = 994;
     gid = 993;
 
-    authentik = {
-      enable = true;
-    };
     traefik = {
       enable = true;
     };
-    www = {
-      enable = true;
-      url = "cnst.dev";
-    };
     gitea = {
       enable = true;
     };
@@ -62,6 +55,22 @@
         credentialsFile = config.age.secrets.vaultwardenCloudflared.path;
       };
     };
+    www = {
+      enable = true;
+      url = "cnst.dev";
+      cloudflared = {
+        tunnelId = "e5076186-efb7-405a-998c-6155af7fb221";
+        credentialsFile = config.age.secrets.wwwCloudflared.path;
+      };
+    };
+    authentik = {
+      enable = true;
+      url = "auth.cnst.dev";
+      cloudflared = {
+        tunnelId = "b66f9368-db9e-4302-8b48-527cda34a635";
+        credentialsFile = config.age.secrets.authentikCloudflared.path;
+      };
+    };
     nextcloud = {
       enable = true;
       adminpassFile = config.age.secrets.nextcloudAdminPass.path;