updated headscale config

Reviewed-on: #2

configuration.nix

@@ -131,12 +131,10 @@
         enable = true;
         secrets = {
           tailscale-key = config.sops.secrets."tailscale/key".path;
+          headplane-env = config.sops.secrets."headplane/env".path;
         };
       };
 
-      headscale-ui = {
-        enable = true;
-      };
 
       jellyfin = {
         enable = true;

flake.nix

@@ -2,7 +2,7 @@
   description = "Sample Homefree Host Config";
 
   inputs = {
-    nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.11";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
 
     homefree.url = "git+https://git.homefree.host/erahhal/HomeFree";
   };

secrets-unencrypted/headplane.yaml

@@ -0,0 +1,9 @@
+headplane:
+    env: |-
+        # This is always required for Headplane to work
+        COOKIE_SECRET=<changeme>
+        # This NEEDS to be set with OIDC, regardless of what's in the config
+        # This needs to be a very long-lived (999 day) API key used to create
+        # shorter ones for OIDC and allow the OIDC functionality to work
+        ROOT_API_KEY=<changeme>
+        # OIDC_CLIENT_SECRET=super_secret_client_secret