remodel begin

This commit is contained in:
2025-08-17 14:04:02 -05:00
parent 1a0a5ced12
commit 453f175edc
36 changed files with 283 additions and 112 deletions

View File

@@ -1,8 +1,8 @@
{ config, lib, inputs, ... }: {
options.sysconfig.opts = {
options.sysconfig = {
netbird.enable = lib.options.mkOption {
services.netbird.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
@@ -18,21 +18,21 @@
config = {
services.netbird = {
enable = config.sysconfig.opts.netbird.enable;
enable = config.sysconfig.services.netbird.enable;
};
networking = {
firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
firewall = lib.mkIf config.sysconfig.virtualization.netbird.enable {
allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 51100; to = 56100; }];
};
nat.internalInterfaces = [ "ve-netbird" ];
};
sops.secrets."netbird/coturnPass" = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {};
sops.secrets."netbird/coturnPass" = lib.mkIf config.sysconfig.virtualization.netbird.enable {};
containers.netbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
containers.netbird = lib.mkIf config.sysconfig.virtualization.netbird.enable {
autoStart = true;
privateNetwork = true;