sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add netbird client (gateway server and dev machine)

Browse source
This commit is contained in:
oddlama 2024-05-18 02:38:38 +02:00
parent 590266c793
commit 8148ce9f37
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
17 changed files with 600 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

19
hosts/kroma/default.nix
View file

@ -2,6 +2,7 @@
inputs,
lib,
minimal,
nodes,
...
}:
{
@ -74,9 +75,21 @@
# };
#};
nixpkgs.config.permittedInsecurePackages = lib.trace "please remove insecure nix 2.16.2 very fast ok thx bye" [
"nix-2.16.2"
];
# FIXME: the ui is not directly accessible via environment.systemPackages
# FIXME: to control it as a user (and to allow SSO) we need to be in the netbird-home group
services.netbird.ui.enable = true;
services.netbird.clients.home = {
port = 51820;
name = "netbird-home";
interface = "wt-home";
openFirewall = true;
config.ServerSSHAllowed = false;
environment = rec {
NB_MANAGEMENT_URL = "https://${nodes.sentinel.config.networking.providedDomains.netbird}";
NB_ADMIN_URL = NB_MANAGEMENT_URL;
NB_HOSTNAME = "home-gateway";
};
};
topology.self.icon = "devices.desktop";
}

1
hosts/ward/default.nix
View file

@ -106,6 +106,7 @@
{}
// mkMicrovm "adguardhome"
// mkMicrovm "forgejo"
// mkMicrovm "home-gateway"
// mkMicrovm "kanidm"
// mkMicrovm "netbird"
// mkMicrovm "radicale"

21
hosts/ward/guests/home-gateway.nix Normal file
View file

@ -0,0 +1,21 @@
{nodes, ...}: {
environment.persistence."/persist".directories = [
{
directory = "/var/lib/netbird-home";
mode = "0700";
}
];
services.netbird.clients.home = {
port = 51820;
name = "netbird-home";
interface = "wt-home";
openFirewall = true;
config.ServerSSHAllowed = false;
environment = rec {
NB_MANAGEMENT_URL = "https://${nodes.sentinel.config.networking.providedDomains.netbird}";
NB_ADMIN_URL = NB_MANAGEMENT_URL;
NB_HOSTNAME = "home-gateway";
};
};
}

1
hosts/ward/secrets/home-gateway/host.pub Normal file
View file

@ -0,0 +1 @@
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILlEjX8dXaeZl+ax7YphX9XNr/S9WwKLsgbV7FDjWNzY