this will explode

hosts/daedalus/default.nix

@@ -31,6 +31,8 @@ with lib.my;
       "ukelele"
       #      "homebrew/cask-drivers/zsa-wally"
       "thunderbird"
+      "balenaetcher"
+      "audacity"
       "openlens"
       "ferdium"
       "discord"
@@ -169,6 +171,7 @@ with lib.my;
 
         bitwarden-cli
         rustup
+        ffmpeg
       ];
 
     };

hosts/picard/default.nix

@@ -24,6 +24,7 @@
       ../../nixos-modules/services/authelia.nix
       ../../nixos-modules/services/hedgedoc.nix
       ../../nixos-modules/services/ts3.nix
+      ../../nixos-modules/services/tailscale-openvpn.nix
       ../../nixos-modules/user
     ];
 
@@ -263,9 +264,17 @@
   };
 
   ragon = {
+
+    agenix.secrets."ovpnNl" = { };
+    agenix.secrets."ovpnDe" = { };
+    agenix.secrets."ovpnTu" = { };
+    agenix.secrets."ovpnCrt1" = { };
+    agenix.secrets."ovpnPw1" = { };
+    agenix.secrets."ovpnPw2" = { };
+    agenix.secrets."tailscaleKey" = { };
     user.enable = true;
     persist.enable = true;
-    persist.extraDirectories = [ "/srv/www" config.services.caddy.dataDir "/var/lib/syncthing" "/var/lib/${config.services.xynoblog.stateDirectory}" "/var/lib/postgresql" config.services.forgejo.stateDir ];
+    persist.extraDirectories = [ "/var/lib/nixos-containers" "/srv/www" config.services.caddy.dataDir "/var/lib/syncthing" "/var/lib/${config.services.xynoblog.stateDirectory}" "/var/lib/postgresql" config.services.forgejo.stateDir ];
 
     services = {
       caddy.enable = true;
@@ -276,6 +285,16 @@
       hedgedoc.enable = true;
       authelia.enable = true;
       ts3.enable = true;
+      tailscale-openvpn = {
+        enable = true;
+        tsAuthKey = config.age.secrets.tailscaleKey.path;
+        config = {
+          nl = config.age.secrets.ovpnNl.path;
+          de = config.age.secrets.ovpnDe.path;
+          tu = config.age.secrets.ovpnTu.path;
+        };
+      };
+
     };
 
   };