Blunkall-Technologies/Olympus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

dashboard only

Browse Source
This commit is contained in:
Nathan
2025-07-27 15:31:40 -05:00
parent 8e5ee39412
commit affa2271b7
3 changed files with 209 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
system-config/services/containers/n8n/default.nix Normal file
View File

@@ -0,0 +1,29 @@
{ config, lib, ... }: {
options.sysconfig.opts.virtualization.n8n.enable = lib.options.mkOption {
type = lib.types.bool;
default = false;
};
config = lib.mkIf config.sysconfig.opts.virtualization.n8n.enable {
containers.n8n = {
autoStart = true;
privateNetwork = true;
hostAddress = "192.168.100.10";
localAddress = "192.168.100.21";
config = {
networking.firewall.allowedTCPPorts = [ 80 ];
services.n8n = {
};
system.stateVersion = "25.05";
};
};
};
}

179
system-config/services/containers/netbird/default.nix
View File

@@ -21,13 +21,190 @@
enable = config.sysconfig.opts.netbird.enable; enable = config.sysconfig.opts.netbird.enable;
}; };
networking.firewall = {
allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
};
containers.netbird-dashboard = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable {
autoStart = true;
privateNetwork = true;
hostAddress = "192.168.100.10";
localAddress = "192.168.100.23";
config = {
services.netbird = {
server = {
enableNginx = false;
management = {
port = 80;
};
dashboard = {
enable = true;
settings = {
AUTH_AUTHORITY = "https://auth.blunkall.us/realms/General/.well-known/openid-configuration";
};
};
};
};
networking.firewall = {
allowedTCPPorts = [ 80 ];
};
system.stateVersion = "25.05";
};
};
containers.netbird-management = lib.mkIf false {
autoStart = true;
privateNetwork = true;
hostAddress = "192.168.100.10";
localAddress = "192.168.100.24";
forwardPorts = [
{
hostPort = 3478;
containerPort = 3478;
protocol = "udp";
}
] ++ map (x: { hostPort = x; containerPort = x; protocol = "udp"; }) (builtins.genList (y: 49152 + y) (54152 - 49152));
bindMounts = {
};
config = {
services.netbird = {
server = {
enableNginx = false;
management = {
enable = true;
disableAnonymousMetrics = true;
dnsDomain = "vpn";
oidcConfigEndpoint = "https://auth.blunkall.us/realms/General/.well-known/openid-configuration";
settings = {
"TURNConfig" = {
"Turns" = [
{
"Proto" = "udp";
"URI" = "turn:vpn.blunkall.us:3478";
"Username" = "netbird";
"Password" = "QTCV8+Q+b+g5FYXz3gRP7suxy9cmbEpFTzYu2+/IQ4E";
}
];
};
};
port = 80;
};
};
};
networking.firewall = {
allowedTCPPorts = [ 80 ];
};
system.stateVersion = "25.05";
};
};
containers.netbird-coturn = lib.mkIf false {
autoStart = true;
privateNetwork = true;
hostAddress = "192.168.100.10";
localAddress = "192.168.100.21";
forwardPorts = [
{
hostPort = 3478;
containerPort = 3478;
protocol = "udp";
}
] ++ map (x: { hostPort = x; containerPort = x; protocol = "udp"; }) (builtins.genList (y: 49152 + y) (54152 - 49152));
bindMounts = {
};
config = {
services.netbird = {
server = {
enable = true;
enableNginx = false;
domain = "vpn.blunkall.us";
management = {
enable = true;
disableAnonymousMetrics = true;
dnsDomain = "vpn";
oidcConfigEndpoint = "https://auth.blunkall.us/realms/General/.well-known/openid-configuration";
settings = {
"TURNConfig" = {
"Turns" = [
{
"Proto" = "udp";
"URI" = "turn:vpn.blunkall.us:3478";
"Username" = "netbird";
"Password" = "QTCV8+Q+b+g5FYXz3gRP7suxy9cmbEpFTzYu2+/IQ4E";
}
];
};
};
port = 33073;
};
dashboard = {
settings = {
AUTH_AUTHORITY = "https://auth.blunkall.us/realms/General/.well-known/openid-configuration";
};
};
coturn = {
enable = true;
password = "password";
};
};
};
networking.firewall = { networking.firewall = {
allowedTCPPorts = [ 80 443 33073 33080 10000 ]; allowedTCPPorts = [ 80 443 33073 33080 10000 ];
allowedUDPPorts = [ 3478 ]; allowedUDPPorts = [ 3478 ];
allowedUDPPortRanges = [{ from = 49152; to = 54152; }]; allowedUDPPortRanges = [{ from = 49152; to = 54152; }];
}; };
containers.netbird = lib.mkIf config.sysconfig.opts.virtualization.netbird.enable { system.stateVersion = "25.05";
};
};
containers.netbird-signal = lib.mkIf false {
autoStart = true; autoStart = true;
privateNetwork = true; privateNetwork = true;

2
system-config/services/containers/traefik/default.nix
View File

@@ -227,7 +227,7 @@
netbird.loadBalancer = { netbird.loadBalancer = {
passHostHeader = true; passHostHeader = true;
servers = [ { url = "http://192.168.100.21:33073"; } ]; servers = [ { url = "http://192.168.100.23"; } ];
}; };
netbirdApi.loadBalancer.servers = [ { url = "http://192.168.100.21:33073"; } ]; netbirdApi.loadBalancer.servers = [ { url = "http://192.168.100.21:33073"; } ];
netbirdMgmt.loadBalancer.servers = [ { url = "h2c://192.168.100.21:33073"; } ]; netbirdMgmt.loadBalancer.servers = [ { url = "h2c://192.168.100.21:33073"; } ];