xun/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add nebula mesh vpn

Browse source
This commit is contained in:
xunuwu 2025-08-27 16:28:21 +02:00
parent df0b6e5187
commit 21b1832dca
Signed by: xun
SSH key fingerprint: SHA256:Uot/1WoAjWAeqLOHA5vYy4phhVydsH7jCPmBjaPZfgI
12 changed files with 203 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/rackserv/default.nix
View file

@ -14,6 +14,7 @@
./profiles/backups.nix
./profiles/caddy.nix
./profiles/forgejo.nix
./profiles/nebula.nix
./profiles/prometheus.nix
]
++ (with systemProfiles; [

26
hosts/rackserv/profiles/nebula.nix Normal file
View file

@ -0,0 +1,26 @@
{config, ...}: {
networking.firewall.allowedTCPPorts = [4343];
services.nebula.networks.xunmesh = {
enable = true;
isLighthouse = true;
cert = config.sops.secrets.nebula-cert.path;
key = config.sops.secrets.nebula-key.path;
ca = config.sops.secrets.nebula-ca-cert.path;
firewall = {
inbound = [
{
host = "any";
port = "any";
proto = "any";
}
];
outbound = [
{
host = "any";
port = "any";
proto = "any";
}
];
};
};
}