From 643b383fa6b4c9b52c25b227a152d184830b1270 Mon Sep 17 00:00:00 2001 From: Nathan Date: Fri, 15 Aug 2025 10:34:30 -0500 Subject: [PATCH] network --- system-config/services/containers/netbird/default.nix | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/system-config/services/containers/netbird/default.nix b/system-config/services/containers/netbird/default.nix index 5e28bf6..29a4e1e 100644 --- a/system-config/services/containers/netbird/default.nix +++ b/system-config/services/containers/netbird/default.nix @@ -21,13 +21,17 @@ enable = config.sysconfig.opts.netbird.enable; }; - networking.firewall = { - allowedUDPPorts = [ 3478 ]; - allowedUDPPortRanges = [{ from = 51100; to = 56100; }]; + networking = { + firewall = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable { + allowedUDPPorts = [ 3478 ]; + allowedUDPPortRanges = [{ from = 51100; to = 56100; }]; + }; + nat.internalInterfaces = [ "ve-netbird" ]; }; sops.secrets."netbird/coturnPass" = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {}; + containers.netbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable { autoStart = true;