nebula: Configure ssh server

This commit is contained in:
SebastianStork 2026-01-01 23:46:15 +01:00
parent 94ac7bbca3
commit b4191c56aa
Signed by: SebastianStork
SSH key fingerprint: SHA256:tRrGdjYOwgHxpSc/wTOZQZEjxcb15P0tyXRsbAfd+2Q
2 changed files with 39 additions and 3 deletions

View file

@ -61,11 +61,11 @@ in
};
sops.secrets."nebula/host-key" = {
owner = config.users.users.nebula-main.name;
restartUnits = [ "nebula@main.service" ];
owner = config.users.users.nebula-mesh.name;
restartUnits = [ "nebula@mesh.service" ];
};
services.nebula.networks.main = {
services.nebula.networks.mesh = {
enable = true;
ca = ./ca.crt;
@ -106,5 +106,7 @@ in
logging.level = "warning";
};
};
networking.firewall.trustedInterfaces = [ "nebula.mesh" ];
};
}