This commit is contained in:
2025-07-21 12:28:40 -05:00
parent 5224315195
commit 57f5cc4630
2 changed files with 8 additions and 8 deletions

View File

@@ -26,7 +26,7 @@
networking.firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable { networking.firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
allowedTCPPorts = [ 80 443 33073 33080 10000 ]; allowedTCPPorts = [ 80 443 33073 33080 10000 ];
allowedUDPPorts = [ 3478 ]; allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 49152; to = 65535; }]; allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
}; };
containers = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable { containers = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
@@ -54,7 +54,7 @@
containerPort = x; containerPort = x;
hostPort = x; hostPort = x;
protocol = "udp"; protocol = "udp";
}) (builtins.genList (y: y + 49152) (5000)); }) (builtins.genList (y: y + 49152) (54152 - 49152));
bindMounts = {}; bindMounts = {};
@@ -66,7 +66,7 @@
networking.firewall = { networking.firewall = {
allowedTCPPorts = [ 80 443 33073 33080 10000 ]; allowedTCPPorts = [ 80 443 33073 33080 10000 ];
allowedUDPPorts = [ 3478 ]; allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 49152; to = 65535; }]; allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
}; };
services.netbird = { services.netbird = {
@@ -102,7 +102,7 @@
NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID = "wXR2HlT7fOmDGRbB8FOJP4BaX1u0UF1mo2hLrFlD"; NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID = "wXR2HlT7fOmDGRbB8FOJP4BaX1u0UF1mo2hLrFlD";
NETBIRD_MGMT_IDP = "authentik"; NETBIRD_MGMT_IDP = "authentik";
NETBIRD_IDP_MGMT_CLIENT_ID = ""; NETBIRD_IDP_MGMT_CLIENT_ID = "wXR2HlT7fOmDGRbB8FOJP4BaX1u0UF1mo2hLrFlD";
NETBIRD_IDP_MGMT_EXTRA_USERNAME = "Netbird"; NETBIRD_IDP_MGMT_EXTRA_USERNAME = "Netbird";
NETBIRD_IDP_MGMT_EXTRA_PASSWORD = "jfdkhsjlkasdhfklslhflhljksd"; NETBIRD_IDP_MGMT_EXTRA_PASSWORD = "jfdkhsjlkasdhfklslhflhljksd";
@@ -111,7 +111,7 @@
NETBIRD_DISABLE_LETSENCRYPT = true; NETBIRD_DISABLE_LETSENCRYPT = true;
NETBIRD_MGMT_API_ENDPOINT = "https://netbirdapi.blunkall.us:443"; NETBIRD_MGMT_API_ENDPOINT = "https://netbirdapi.blunkall.us:443";
NETBIRD_MGMT_GRPC_API_ENDPOINT = "https://netbirdapi.blunkall.us:443"; NETBIRD_MGMT_GRPC_API_ENDPOINT = "https://netbirdapi.blunkall.us:443";
NETBIRD_RELAY_PORT = "443"; #NETBIRD_RELAY_PORT = "443";
TURN_MAX_PORT = "54152"; TURN_MAX_PORT = "54152";

View File

@@ -225,19 +225,19 @@
}; };
netbirdApi = { netbirdApi = {
entryPoints = [ "websecure" ]; entryPoints = [ "websecure" ];
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/api`)"; rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/api`)";
service = "netbirdApi"; service = "netbirdApi";
tls.certResolver = "cloudflare"; tls.certResolver = "cloudflare";
}; };
netbirdMgmt = { netbirdMgmt = {
entryPoints = [ "websecure" ]; entryPoints = [ "websecure" ];
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/management`)"; rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/management.ManagementService`)";
service = "netbirdMgmt"; service = "netbirdMgmt";
tls.certResolver = "cloudflare"; tls.certResolver = "cloudflare";
}; };
netbirdSignal = { netbirdSignal = {
entryPoints = [ "websecure" ]; entryPoints = [ "websecure" ];
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/signalexchange`)"; rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/signalexchange.SignalExchange`)";
service = "netbirdSignal"; service = "netbirdSignal";
tls.certResolver = "cloudflare"; tls.certResolver = "cloudflare";
}; };