Tailscale Authkey Generator

ts-authkey.sh

#!/usr/bin/bash
set -euo pipefail
shopt -s lastpipe

curl -sSf 'https://api.tailscale.com/api/v2/oauth/token' -d "client_id=${TS_CLIENT_ID:?client id missing}" -d "client_secret=${TS_CLIENT_SECRET:?client secret missing}" | jq -r .access_token | read -r token
jq -n --arg reusable "${TS_REUSEABLE:-false}" --arg ephemeral "${TS_EPHEMERAL:-false}" --arg tag "${TS_TAG:?tag missing}" --arg expiry "${TS_EXPIRY:-3600}" --arg description "${TS_DESCRIPTION:-}" '{"capabilities":{"devices":{"create":{"reusable":$reusable|toboolean,"ephemeral":$ephemeral|toboolean,"preauthorized":true,"tags":["tag:\($tag)"]}}},"expirySeconds":$expiry|tonumber,"description":$description}' | curl -sSf 'https://api.tailscale.com/api/v2/tailnet/-/keys?all=true' --oauth2-bearer "${token}" --json @- | jq -r .key | read -r authkey
echo "${authkey}"