debug
This commit is contained in:
@@ -21,16 +21,70 @@
|
||||
enable = config.sysconfig.opts.netbird.enable;
|
||||
};
|
||||
|
||||
systemd.services.launchNetbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
|
||||
containers.netbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
|
||||
|
||||
enable = false;
|
||||
autoStart = true;
|
||||
privateNetwork = true;
|
||||
hostAddress = "192.168.100.10";
|
||||
localAddress = "192.168.100.21";
|
||||
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
forwardPorts = [
|
||||
|
||||
];
|
||||
|
||||
script = ''
|
||||
cd /ssd1/Netbird
|
||||
${pkgs.docker-compose}/bin/docker-compose up
|
||||
'';
|
||||
bindMounts = {
|
||||
|
||||
};
|
||||
|
||||
|
||||
config = {
|
||||
|
||||
services.netbird = {
|
||||
server = {
|
||||
enable = true;
|
||||
enableNginx = false;
|
||||
domain = "vpn.blunkall.us";
|
||||
|
||||
management = {
|
||||
enable = true;
|
||||
|
||||
disableAnonymousMetrics = true;
|
||||
|
||||
dnsDomain = "vpn";
|
||||
|
||||
oidcConfigEndpoint = "https://auth.blunkall.us/application/o/netbird/.well-known/openid-configuration";
|
||||
|
||||
settings = {};
|
||||
};
|
||||
|
||||
dashboard = {
|
||||
enable = true;
|
||||
|
||||
settings = {
|
||||
AUTH_AUTHORITY = "https://auth.blunkall.us/application/o/netbird/.well-known/openid-configuration";
|
||||
};
|
||||
};
|
||||
|
||||
coturn = {
|
||||
enable = true;
|
||||
|
||||
password = "password";
|
||||
};
|
||||
|
||||
signal = {
|
||||
enable = true;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
networking.firewall = {
|
||||
allowedTCPPorts = [ 80 443 33073 33080 10000 ];
|
||||
allowedUDPPorts = [ 3478 ];
|
||||
allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
|
||||
};
|
||||
|
||||
system.stateVersion = "25.05";
|
||||
};
|
||||
};
|
||||
|
||||
};
|
||||
|
||||
@@ -20,7 +20,7 @@
|
||||
openFirewall = true;
|
||||
dataDir = "/var/lib/mcservers";
|
||||
|
||||
#managementSystem.systemd-socket.enable = true; #temp
|
||||
managementSystem.systemd-socket.enable = true; #temp
|
||||
|
||||
servers = {
|
||||
|
||||
|
||||
Reference in New Issue
Block a user