SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 12:51:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Compare commits

base: SebastianStork:2703325b4d56f88ac0b474fcac9a6f18eb290497
Branches Tags
SebastianStork:main
SebastianStork:develop
..
compare: SebastianStork:2b5bc47384c0dea3e1f268635a3399121f1cc59d
Branches Tags
SebastianStork:main
SebastianStork:develop

No commits in common. "2703325b4d56f88ac0b474fcac9a6f18eb290497" and "2b5bc47384c0dea3e1f268635a3399121f1cc59d" have entirely different histories.
2703325b4d ... 2b5bc47384

5 changed files with 5 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/vps-monitor/default.nix
View file

@ -37,7 +37,7 @@
onlyCleanRoots = true;
};
nebula.enable = true;
nebula.node.enable = true;
sshd.enable = true;
dns.enable = true;
};

2
hosts/vps-private/default.nix
View file

@ -41,7 +41,7 @@
onlyCleanRoots = true;
};
nebula.enable = true;
nebula.node.enable = true;
sshd.enable = true;
dns.enable = true;

2
hosts/vps-public/default.nix
View file

@ -36,7 +36,7 @@
onlyCleanRoots = true;
};
nebula.enable = true;
nebula.node.enable = true;
sshd.enable = true;
crowdsec = {

2
modules/system/networking.nix
View file

@ -41,7 +41,7 @@ in
};
interface = lib.mkOption {
type = lib.types.nonEmptyStr;
default = "nebula";
default = "nebula.mesh";
};
systemdUnit = lib.mkOption {
type = lib.types.nonEmptyStr;

3
modules/system/services/nebula/default.nix
View file

@ -30,7 +30,7 @@ in
message = "'${netCfg.hostname}' is a Nebula lighthouse, but underlay.isPublic is not set. Lighthouses must be publicly reachable.";
};
meta.ports.udp = lib.optional netCfg.underlay.isPublic publicPort;
meta.ports.udp = lib.optional (netCfg.underlay.isPublic) publicPort;
sops.secrets."nebula/host-key" = {
owner = config.users.users.nebula-mesh.name;
@ -44,7 +44,6 @@ in
cert = cfg.certificatePath;
key = config.sops.secrets."nebula/host-key".path;
tun.device = netCfg.overlay.interface;
listen.port = lib.mkIf netCfg.underlay.isPublic publicPort;
inherit (netCfg) isLighthouse;