SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 12:51:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Create networking abstraction on top of nebula

Browse source
This commit is contained in:
SebastianStork 2026-01-11 19:13:30 +01:00
parent 6804112df6
commit 252abe9443
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q
15 changed files with 223 additions and 165 deletions
Download patch file Download diff file Expand all files Collapse all files

13
hosts/desktop/default.nix
View file

@ -23,14 +23,17 @@
};
de.hyprland.enable = true;
networking = {
overlay.address = "10.254.250.1";
underlay.interface = "enp6s0";
isClient = true;
};
services = {
gc.enable = true;
sound.enable = true;
nebula.node = {
enable = true;
address = "10.254.250.1";
isClient = true;
};
nebula.enable = true;
sshd.enable = true;
syncthing = {
enable = true;
deviceId = "FAJS5WM-UAWGW2U-FXCGPSP-VAUOTGM-XUKSEES-D66PMCJ-WBODJLV-XTNCRA7";

13
hosts/laptop/default.nix
View file

@ -23,17 +23,20 @@
};
de.hyprland.enable = true;
networking = {
overlay.address = "10.254.250.3";
underlay.interface = "wlan0";
isClient = true;
};
services = {
resolved.enable = true;
gc.enable = true;
wlan.enable = true;
bluetooth.enable = true;
sound.enable = true;
nebula.node = {
enable = true;
address = "10.254.250.3";
isClient = true;
};
nebula.enable = true;
sshd.enable = true;
syncthing = {
enable = true;
deviceId = "Q4YPD3V-GXZPHSN-PT5X4PU-FBG4GX2-IASBX75-7NYMG75-4EJHBMZ-4WGDDAP";

24
hosts/vps-monitor/default.nix
View file

@ -20,25 +20,31 @@
boot.loader.grub.enable = true;
networking = {
overlay.address = "10.254.250.5";
underlay = {
interface = "enp1s0";
address = "188.245.223.145";
isPublic = true;
};
isLighthouse = true;
isServer = true;
};
services = {
gc = {
enable = true;
onlyCleanRoots = true;
};
nebula.node = {
enable = true;
address = "10.254.250.5";
routableAddress = "188.245.223.145";
isLighthouse = true;
isServer = true;
dns.enable = true;
};
nebula.node.enable = true;
sshd.enable = true;
dns.enable = true;
};
web-services =
let
privateDomain = config.custom.services.nebula.network.domain;
privateDomain = config.custom.networking.overlay.domain;
in
{
gatus = {

24
hosts/vps-private/default.nix
View file

@ -15,7 +15,7 @@
custom =
let
privateDomain = config.custom.services.nebula.network.domain;
privateDomain = config.custom.networking.overlay.domain;
in
{
persistence.enable = true;
@ -24,20 +24,26 @@
boot.loader.systemd-boot.enable = true;
networking = {
overlay.address = "10.254.250.2";
underlay = {
interface = "enp1s0";
address = "49.13.231.235";
isPublic = true;
};
isLighthouse = true;
isServer = true;
};
services = {
gc = {
enable = true;
onlyCleanRoots = true;
};
nebula.node = {
enable = true;
address = "10.254.250.2";
routableAddress = "49.13.231.235";
isLighthouse = true;
isServer = true;
dns.enable = true;
};
nebula.node.enable = true;
sshd.enable = true;
dns.enable = true;
syncthing = {
enable = true;

20
hosts/vps-public/default.nix
View file

@ -20,18 +20,24 @@
boot.loader.systemd-boot.enable = true;
networking = {
overlay.address = "10.254.250.4";
underlay = {
interface = "enp1s0";
address = "167.235.73.246";
isPublic = true;
};
isServer = true;
};
services = {
gc = {
enable = true;
onlyCleanRoots = true;
};
nebula.node = {
enable = true;
address = "10.254.250.4";
routableAddress = "167.235.73.246";
isServer = true;
};
nebula.node.enable = true;
sshd.enable = true;
crowdsec = {
enable = true;
@ -76,7 +82,7 @@
alloy = {
enable = true;
domain = "alloy.${config.networking.hostName}.${config.custom.services.nebula.network.domain}";
domain = "alloy.${config.networking.hostName}.${config.custom.networking.overlay.domain}";
};
};
};