try
This commit is contained in:
@@ -26,7 +26,7 @@
|
|||||||
networking.firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
|
networking.firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
|
||||||
allowedTCPPorts = [ 80 443 33073 33080 10000 ];
|
allowedTCPPorts = [ 80 443 33073 33080 10000 ];
|
||||||
allowedUDPPorts = [ 3478 ];
|
allowedUDPPorts = [ 3478 ];
|
||||||
allowedUDPPortRanges = [{ from = 49152; to = 65535; }];
|
allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
|
||||||
};
|
};
|
||||||
|
|
||||||
containers = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
|
containers = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
|
||||||
@@ -54,7 +54,7 @@
|
|||||||
containerPort = x;
|
containerPort = x;
|
||||||
hostPort = x;
|
hostPort = x;
|
||||||
protocol = "udp";
|
protocol = "udp";
|
||||||
}) (builtins.genList (y: y + 49152) (5000));
|
}) (builtins.genList (y: y + 49152) (54152 - 49152));
|
||||||
|
|
||||||
|
|
||||||
bindMounts = {};
|
bindMounts = {};
|
||||||
@@ -66,7 +66,7 @@
|
|||||||
networking.firewall = {
|
networking.firewall = {
|
||||||
allowedTCPPorts = [ 80 443 33073 33080 10000 ];
|
allowedTCPPorts = [ 80 443 33073 33080 10000 ];
|
||||||
allowedUDPPorts = [ 3478 ];
|
allowedUDPPorts = [ 3478 ];
|
||||||
allowedUDPPortRanges = [{ from = 49152; to = 65535; }];
|
allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
|
||||||
};
|
};
|
||||||
|
|
||||||
services.netbird = {
|
services.netbird = {
|
||||||
@@ -102,7 +102,7 @@
|
|||||||
NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID = "wXR2HlT7fOmDGRbB8FOJP4BaX1u0UF1mo2hLrFlD";
|
NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID = "wXR2HlT7fOmDGRbB8FOJP4BaX1u0UF1mo2hLrFlD";
|
||||||
|
|
||||||
NETBIRD_MGMT_IDP = "authentik";
|
NETBIRD_MGMT_IDP = "authentik";
|
||||||
NETBIRD_IDP_MGMT_CLIENT_ID = "";
|
NETBIRD_IDP_MGMT_CLIENT_ID = "wXR2HlT7fOmDGRbB8FOJP4BaX1u0UF1mo2hLrFlD";
|
||||||
NETBIRD_IDP_MGMT_EXTRA_USERNAME = "Netbird";
|
NETBIRD_IDP_MGMT_EXTRA_USERNAME = "Netbird";
|
||||||
NETBIRD_IDP_MGMT_EXTRA_PASSWORD = "jfdkhsjlkasdhfklslhflhljksd";
|
NETBIRD_IDP_MGMT_EXTRA_PASSWORD = "jfdkhsjlkasdhfklslhflhljksd";
|
||||||
|
|
||||||
@@ -111,7 +111,7 @@
|
|||||||
NETBIRD_DISABLE_LETSENCRYPT = true;
|
NETBIRD_DISABLE_LETSENCRYPT = true;
|
||||||
NETBIRD_MGMT_API_ENDPOINT = "https://netbirdapi.blunkall.us:443";
|
NETBIRD_MGMT_API_ENDPOINT = "https://netbirdapi.blunkall.us:443";
|
||||||
NETBIRD_MGMT_GRPC_API_ENDPOINT = "https://netbirdapi.blunkall.us:443";
|
NETBIRD_MGMT_GRPC_API_ENDPOINT = "https://netbirdapi.blunkall.us:443";
|
||||||
NETBIRD_RELAY_PORT = "443";
|
#NETBIRD_RELAY_PORT = "443";
|
||||||
|
|
||||||
TURN_MAX_PORT = "54152";
|
TURN_MAX_PORT = "54152";
|
||||||
|
|
||||||
|
|||||||
@@ -225,19 +225,19 @@
|
|||||||
};
|
};
|
||||||
netbirdApi = {
|
netbirdApi = {
|
||||||
entryPoints = [ "websecure" ];
|
entryPoints = [ "websecure" ];
|
||||||
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/api`)";
|
rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/api`)";
|
||||||
service = "netbirdApi";
|
service = "netbirdApi";
|
||||||
tls.certResolver = "cloudflare";
|
tls.certResolver = "cloudflare";
|
||||||
};
|
};
|
||||||
netbirdMgmt = {
|
netbirdMgmt = {
|
||||||
entryPoints = [ "websecure" ];
|
entryPoints = [ "websecure" ];
|
||||||
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/management`)";
|
rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/management.ManagementService`)";
|
||||||
service = "netbirdMgmt";
|
service = "netbirdMgmt";
|
||||||
tls.certResolver = "cloudflare";
|
tls.certResolver = "cloudflare";
|
||||||
};
|
};
|
||||||
netbirdSignal = {
|
netbirdSignal = {
|
||||||
entryPoints = [ "websecure" ];
|
entryPoints = [ "websecure" ];
|
||||||
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/signalexchange`)";
|
rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/signalexchange.SignalExchange`)";
|
||||||
service = "netbirdSignal";
|
service = "netbirdSignal";
|
||||||
tls.certResolver = "cloudflare";
|
tls.certResolver = "cloudflare";
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user