xun/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add nebula mesh vpn

Browse source
This commit is contained in:
xunuwu 2025-08-27 16:28:21 +02:00
parent df0b6e5187
commit 21b1832dca
Signed by: xun
SSH key fingerprint: SHA256:Uot/1WoAjWAeqLOHA5vYy4phhVydsH7jCPmBjaPZfgI
12 changed files with 203 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

32
sys/profiles/network/nebula.nix Normal file
View file

@ -0,0 +1,32 @@
{config, ...}: {
services.nebula.networks.xunmesh = {
enable = true;
staticHostMap = {
"30.0.0.1" = ["172.245.52.19:4242"];
};
cert = config.sops.secrets.nebula-cert.path;
key = config.sops.secrets.nebula-key.path;
ca = config.sops.secrets.nebula-ca-cert.path;
firewall = {
inbound = [
{
host = "any";
port = "any";
proto = "any";
}
];
outbound = [
{
host = "any";
port = "any";
proto = "any";
}
];
};
settings = {
preferred_ranges = ["192.168.50.0/24"];
lighthouse.hosts = ["30.0.0.1"];
punchy.punch = true;
};
};
}