Add ed25519 keys to the cloud host

modules/my-tinc/default.nix

@@ -93,6 +93,8 @@ in
 
           ed25519PrivateKeyFile = cfg.ed25519PrivateKey;
           rsaPrivateKeyFile = cfg.rsaPrivateKey;
+
+          settings.ExperimentalProtocol = "yes";
         };
       }
     )

modules/my-tinc/hosts/default.nix

@@ -4,6 +4,7 @@
     subnetAddr = "11.0.0.1";
     address = "nki.personal";
     rsaPublicKey = builtins.readFile ./nki-cloud.pub;
+    ed25519PublicKey = "fZi75omD1Z2vZYH7FleZ+ygKLqGj2emlLMvw3XcmZPM";
   };
 
   home = {

nki-personal-do/configuration.nix

@@ -45,8 +45,10 @@
   # tinc
   services.my-tinc.enable = true;
   services.my-tinc.hostName = "cloud";
-  sops.secrets.tinc-private-key = { };
-  services.my-tinc.rsaPrivateKey = config.sops.secrets.tinc-private-key.path;
+  sops.secrets."tinc/rsa-private-key" = { };
+  sops.secrets."tinc/ed25519-private-key" = { };
+  services.my-tinc.rsaPrivateKey = config.sops.secrets."tinc/rsa-private-key".path;
+  services.my-tinc.ed25519PrivateKey = config.sops.secrets."tinc/ed25519-private-key".path;
 
   # Set up traefik
   sops.secrets.cloudflare-dns-api-token = { owner = "traefik"; };