Added tailscale

Also routes the whole subnet of the cluster over tailscale so it can act
as an entry point to my home network even when not at home.

patches/tailscale.yaml

@@ -3,5 +3,5 @@ kind: ExtensionServiceConfig
 name: tailscale
 environment:
     - TS_AUTHKEY={{ config.tailscale.authKey }}
-    - TS_EXTRA_ARGS=--login-server https://headscale.huizinga.dev
+    - TS_EXTRA_ARGS=--login-server {{ config.tailscale.loginServer }}
     - TS_ROUTES={{ helper.tailscale_subnet(node.gateway, node.netmask) }}

requirements.txt

@@ -2,4 +2,5 @@ PyYAML==6.0.3
 requests==2.32.5
 Jinja2==3.1.6
 GitPython==3.1.45
+mergedeep==1.3.4
 netaddr==1.3.0

tools/render

@@ -11,6 +11,7 @@ import git
 import requests
 import yaml
 from jinja2 import Environment, FileSystemLoader, StrictUndefined, Template
+from mergedeep import merge
 from netaddr import IPAddress
 
 REPO = git.Repo(sys.path[0], search_parent_directories=True)
@@ -141,7 +142,9 @@ def main():
         config = yaml.safe_load(fyaml)
 
     with open(ROOT.joinpath("secrets.yaml")) as fyaml:
-        config |= yaml.safe_load(fyaml)
+        merge(config, yaml.safe_load(fyaml))
+
+    print(config)
 
     template_args = {
         "config": config,