Blunkall-Technologies/Olympus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

try

Browse Source
This commit is contained in:
Nathan
2025-07-21 12:28:40 -05:00
parent 5224315195
commit 57f5cc4630
2 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
system-config/services/containers/netbird/default.nix
View File

@@ -26,7 +26,7 @@
networking.firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
allowedTCPPorts = [ 80 443 33073 33080 10000 ];
allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 49152; to = 65535; }];
allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
};
containers = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
@@ -54,7 +54,7 @@
containerPort = x;
hostPort = x;
protocol = "udp";
}) (builtins.genList (y: y + 49152) (5000));
}) (builtins.genList (y: y + 49152) (54152 - 49152));
bindMounts = {};
@@ -66,7 +66,7 @@
networking.firewall = {
allowedTCPPorts = [ 80 443 33073 33080 10000 ];
allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 49152; to = 65535; }];
allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
};
services.netbird = {
@@ -102,7 +102,7 @@
NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID = "wXR2HlT7fOmDGRbB8FOJP4BaX1u0UF1mo2hLrFlD";
NETBIRD_MGMT_IDP = "authentik";
NETBIRD_IDP_MGMT_CLIENT_ID = "";
NETBIRD_IDP_MGMT_CLIENT_ID = "wXR2HlT7fOmDGRbB8FOJP4BaX1u0UF1mo2hLrFlD";
NETBIRD_IDP_MGMT_EXTRA_USERNAME = "Netbird";
NETBIRD_IDP_MGMT_EXTRA_PASSWORD = "jfdkhsjlkasdhfklslhflhljksd";
@@ -111,7 +111,7 @@
NETBIRD_DISABLE_LETSENCRYPT = true;
NETBIRD_MGMT_API_ENDPOINT = "https://netbirdapi.blunkall.us:443";
NETBIRD_MGMT_GRPC_API_ENDPOINT = "https://netbirdapi.blunkall.us:443";
NETBIRD_RELAY_PORT = "443";
#NETBIRD_RELAY_PORT = "443";
TURN_MAX_PORT = "54152";

6
system-config/services/containers/traefik/default.nix
View File

@@ -225,19 +225,19 @@
};
netbirdApi = {
entryPoints = [ "websecure" ];
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/api`)";
rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/api`)";
service = "netbirdApi";
tls.certResolver = "cloudflare";
};
netbirdMgmt = {
entryPoints = [ "websecure" ];
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/management`)";
rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/management.ManagementService`)";
service = "netbirdMgmt";
tls.certResolver = "cloudflare";
};
netbirdSignal = {
entryPoints = [ "websecure" ];
rule = "Host(`netbirdapi.blunkall.us`) && PathPrefix(`/signalexchange`)";
rule = "Host(`vpn.blunkall.us`) && PathPrefix(`/signalexchange.SignalExchange`)";
service = "netbirdSignal";
tls.certResolver = "cloudflare";
};