SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 12:51:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Compare commits

base: SebastianStork:2b5bc47384c0dea3e1f268635a3399121f1cc59d
Branches Tags
SebastianStork:main
SebastianStork:develop
..
compare: SebastianStork:2703325b4d56f88ac0b474fcac9a6f18eb290497
Branches Tags
SebastianStork:main
SebastianStork:develop

2 commits
2b5bc47384 ... 2703325b4d

Author SHA1 Message Date
SebastianStork
2703325b4d
nebula: Change network interface name to nebula 2026-01-11 21:38:56 +01:00
SebastianStork
79da1f6644
vps-*: Fix nebula option name 2026-01-11 21:33:00 +01:00
5 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/vps-monitor/default.nix
View file

@ -37,7 +37,7 @@
onlyCleanRoots = true; onlyCleanRoots = true;
}; };
nebula.node.enable = true; nebula.enable = true;
sshd.enable = true; sshd.enable = true;
dns.enable = true; dns.enable = true;
}; };

2
hosts/vps-private/default.nix
View file

@ -41,7 +41,7 @@
onlyCleanRoots = true; onlyCleanRoots = true;
}; };
nebula.node.enable = true; nebula.enable = true;
sshd.enable = true; sshd.enable = true;
dns.enable = true; dns.enable = true;

2
hosts/vps-public/default.nix
View file

@ -36,7 +36,7 @@
onlyCleanRoots = true; onlyCleanRoots = true;
}; };
nebula.node.enable = true; nebula.enable = true;
sshd.enable = true; sshd.enable = true;
crowdsec = { crowdsec = {

2
modules/system/networking.nix
View file

@ -41,7 +41,7 @@ in
}; };
interface = lib.mkOption { interface = lib.mkOption {
type = lib.types.nonEmptyStr; type = lib.types.nonEmptyStr;
default = "nebula.mesh"; default = "nebula";
}; };
systemdUnit = lib.mkOption { systemdUnit = lib.mkOption {
type = lib.types.nonEmptyStr; type = lib.types.nonEmptyStr;

3
modules/system/services/nebula/default.nix
View file

@ -30,7 +30,7 @@ in
message = "'${netCfg.hostname}' is a Nebula lighthouse, but underlay.isPublic is not set. Lighthouses must be publicly reachable."; message = "'${netCfg.hostname}' is a Nebula lighthouse, but underlay.isPublic is not set. Lighthouses must be publicly reachable.";
}; };
meta.ports.udp = lib.optional (netCfg.underlay.isPublic) publicPort; meta.ports.udp = lib.optional netCfg.underlay.isPublic publicPort;
sops.secrets."nebula/host-key" = { sops.secrets."nebula/host-key" = {
owner = config.users.users.nebula-mesh.name; owner = config.users.users.nebula-mesh.name;
@ -44,6 +44,7 @@ in
cert = cfg.certificatePath; cert = cfg.certificatePath;
key = config.sops.secrets."nebula/host-key".path; key = config.sops.secrets."nebula/host-key".path;
tun.device = netCfg.overlay.interface;
listen.port = lib.mkIf netCfg.underlay.isPublic publicPort; listen.port = lib.mkIf netCfg.underlay.isPublic publicPort;
inherit (netCfg) isLighthouse; inherit (netCfg) isLighthouse;