key solved?

2025-07-27 16:42:07 -05:00
parent 0a941c74da
commit 437dd45e98
2 changed files with 100 additions and 7 deletions
--- a/system-config/services/containers/netbird/default.nix
+++ b/system-config/services/containers/netbird/default.nix
@@ -25,7 +25,7 @@
            allowedUDPPorts = [ 3478 ];
            allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
        };
-
+/*
        containers.netbird-dashboard = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {

            autoStart = true;
@@ -206,4 +206,97 @@
        };

    };
+*/
+
+    containers.netbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
+
+        autoStart = true;
+        privateNetwork = true;
+        hostAddress = "192.168.100.10";
+        localAddress = "192.168.100.23";
+
+        forwardPorts = [
+
+        {
+            hostPort = 3478;
+            containerPort = 3478;
+            protocol = "udp";
+        }
+
+        ] ++ map (x: { hostPort = x; containerPort = x; protocol = "udp"; }) (builtins.genList (y: 49152 + y) (54152 - 49152));
+
+
+        config = {
+
+            services.netbird = {
+                server = {
+                    enable = true;
+                    enableNginx = false;
+                    domain = "vpn.blunkall.us";
+
+                    dashboard = {
+                        enable = true;
+                        settings = {
+                            AUTH_AUTHORITY = "https://auth.blunkall.us/realms/General/.well-known/openid-configuration";
+                        };
+                    };
+                    management = {
+                        enable = true;
+
+                        domain = "mgmt.blunkall.us";
+
+                        disableAnonymousMetrics = true;
+
+                        dnsDomain = "vpn";
+
+                        turnDomain = "vpn.blunkall.us";
+                        turnPort = 3478;
+
+                        oidcConfigEndpoint = "https://auth.blunkall.us/realms/General/.well-known/openid-configuration";
+
+                        settings = {
+                            "TURNConfig" = {
+                                "Turns" = [
+                                {
+                                    "Proto" = "udp";
+                                    "URI" = "turn:vpn.blunkall.us:3478";
+                                    "Username" = "netbird";
+                                    "Password" = "password";
+                                }
+                                ];
+                            };
+
+                            DataStoreEncryptionKey = "770A8A65DA156D24EE2A093277530142";
+                        };
+
+                        port = 80;
+                    };
+
+                    coturn = {
+                        enable = true;
+
+                        user = "netbird";
+                        password = "password";
+
+                        openPorts = map (x: x) (builtins.genList (y: 49152 + y) (54152 - 49152));
+                    };
+
+                    signal = {
+                        enable = true;
+                        port = 8080;
+                    };
+                };
+            };
+
+            networking.firewall = {
+                allowedTCPPorts = [ ];
+                allowedUDPPorts = [ 3478 ];
+                allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
+            };
+
+            system.stateVersion = "25.05";
+        };
+    };
+
+
 }