Blunkall-Technologies/Olympus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

key solved?

Browse Source
This commit is contained in:
Nathan
2025-07-27 16:42:07 -05:00
parent 0a941c74da
commit 437dd45e98
2 changed files with 100 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

95
system-config/services/containers/netbird/default.nix
View File

@@ -25,7 +25,7 @@
allowedUDPPorts = [ 3478 ]; allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 49152; to = 54152; }]; allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
}; };
/*
containers.netbird-dashboard = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable { containers.netbird-dashboard = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
autoStart = true; autoStart = true;
@@ -206,4 +206,97 @@
}; };
}; };
*/
containers.netbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
autoStart = true;
privateNetwork = true;
hostAddress = "192.168.100.10";
localAddress = "192.168.100.23";
forwardPorts = [
{
hostPort = 3478;
containerPort = 3478;
protocol = "udp";
}
] ++ map (x: { hostPort = x; containerPort = x; protocol = "udp"; }) (builtins.genList (y: 49152 + y) (54152 - 49152));
config = {
services.netbird = {
server = {
enable = true;
enableNginx = false;
domain = "vpn.blunkall.us";
dashboard = {
enable = true;
settings = {
AUTH_AUTHORITY = "https://auth.blunkall.us/realms/General/.well-known/openid-configuration";
};
};
management = {
enable = true;
domain = "mgmt.blunkall.us";
disableAnonymousMetrics = true;
dnsDomain = "vpn";
turnDomain = "vpn.blunkall.us";
turnPort = 3478;
oidcConfigEndpoint = "https://auth.blunkall.us/realms/General/.well-known/openid-configuration";
settings = {
"TURNConfig" = {
"Turns" = [
{
"Proto" = "udp";
"URI" = "turn:vpn.blunkall.us:3478";
"Username" = "netbird";
"Password" = "password";
}
];
};
DataStoreEncryptionKey = "770A8A65DA156D24EE2A093277530142";
};
port = 80;
};
coturn = {
enable = true;
user = "netbird";
password = "password";
openPorts = map (x: x) (builtins.genList (y: 49152 + y) (54152 - 49152));
};
signal = {
enable = true;
port = 8080;
};
};
};
networking.firewall = {
allowedTCPPorts = [ ];
allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
};
system.stateVersion = "25.05";
};
};
} }

12
system-config/services/containers/traefik/default.nix
View File

@@ -178,19 +178,19 @@
}; };
netbirdApi = { netbirdApi = {
entryPoints = [ "websecure" ]; entryPoints = [ "websecure" ];
rule = "Host(`mgmt.blunkall.us`) && PathPrefix(`/api`)"; rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/api`)";
service = "netbirdApi"; service = "netbirdApi";
tls.certResolver = "cloudflare"; tls.certResolver = "cloudflare";
}; };
netbirdMgmt = { netbirdMgmt = {
entryPoints = [ "websecure" ]; entryPoints = [ "websecure" ];
rule = "Host(`mgmt.blunkall.us`) && PathPrefix(`/management.ManagementService`)"; rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/management.ManagementService`)";
service = "netbirdMgmt"; service = "netbirdMgmt";
tls.certResolver = "cloudflare"; tls.certResolver = "cloudflare";
}; };
netbirdSignal = { netbirdSignal = {
entryPoints = [ "websecure" ]; entryPoints = [ "websecure" ];
rule = "Host(`signal.blunkall.us`) && PathPrefix(`/signalexchange.SignalExchange`)"; rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/signalexchange.SignalExchange`)";
service = "netbirdSignal"; service = "netbirdSignal";
tls.certResolver = "cloudflare"; tls.certResolver = "cloudflare";
}; };
@@ -229,9 +229,9 @@
passHostHeader = true; passHostHeader = true;
servers = [ { url = "http://192.168.100.23:80"; } ]; servers = [ { url = "http://192.168.100.23:80"; } ];
}; };
netbirdApi.loadBalancer.servers = [ { url = "http://192.168.100.24:80"; } ]; netbirdApi.loadBalancer.servers = [ { url = "http://192.168.100.23:80"; } ];
netbirdMgmt.loadBalancer.servers = [ { url = "h2c://192.168.100.24:80"; } ]; netbirdMgmt.loadBalancer.servers = [ { url = "h2c://192.168.100.23:80"; } ];
netbirdSignal.loadBalancer.servers = [ { url = "h2c://192.168.100.26:80"; } ]; netbirdSignal.loadBalancer.servers = [ { url = "h2c://192.168.100.23:8080"; } ];
#homeassistant.loadBalancer.servers = [ { url = "http://192.168.100.10:8123"; } ]; #homeassistant.loadBalancer.servers = [ { url = "http://192.168.100.10:8123"; } ];