62 lines
1.8 KiB
Nix
62 lines
1.8 KiB
Nix
{ config, lib, self, ... }:
|
|
|
|
let
|
|
cfg = config.modules.networking.netbird;
|
|
hostname = config.networking.hostName;
|
|
in {
|
|
options.modules.networking.netbird = {
|
|
enable = lib.mkEnableOption "netbird";
|
|
coordinatorDomain = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "netbird.vimium.net";
|
|
};
|
|
meshDomain = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "mesh.vimium.net";
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
age.secrets."passwords/services/netbird/data-store-encryption-key" = {
|
|
file = "${self.inputs.secrets}/passwords/services/netbird/data-store-encryption-key.age";
|
|
};
|
|
|
|
services.netbird = {
|
|
enable = true;
|
|
};
|
|
|
|
services.netbird.server = {
|
|
domain = cfg.coordinatorDomain;
|
|
enable = true;
|
|
enableNginx = true;
|
|
dashboard.settings.AUTH_AUTHORITY = "https://auth.vimium.com/oauth2/openid/netbird";
|
|
management = rec {
|
|
disableAnonymousMetrics = true;
|
|
dnsDomain = cfg.meshDomain;
|
|
oidcConfigEndpoint = "https://auth.vimium.com/oauth2/openid/netbird/.well-known/openid-configuration";
|
|
settings = {
|
|
DataStoreEncryptionKey = {
|
|
_secret = config.age.secrets."passwords/services/netbird/data-store-encryption-key".path;
|
|
};
|
|
HttpConfig = {
|
|
AuthAudience = "netbird";
|
|
};
|
|
StoreConfig = { Engine = "sqlite"; };
|
|
TURNConfig = {
|
|
Secret._secret = config.age.secrets."passwords/services/coturn/static-auth-secret".path;
|
|
TimeBasedCredentials = true;
|
|
};
|
|
};
|
|
singleAccountModeDomain = dnsDomain;
|
|
turnDomain = config.services.coturn.realm;
|
|
turnPort = config.services.coturn.listening-port;
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts."netbird.vimium.net" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
};
|
|
};
|
|
}
|