chn/nixos
1
0
Fork 0
mirror of https://github.com/CHN-beta/nixos.git synced 2026-01-12 04:19:22 +08:00
Code Issues Packages Projects Releases Wiki Activity

vps7: enable nebula

Browse Source
This commit is contained in:
陈浩南
2023-09-03 14:37:38 +08:00
parent ac9a792095
commit 3671fde36b
3 changed files with 12 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
flake.nix
View File

@@ -129,11 +129,7 @@
modules.modprobeConfig = [ "options iwlmvm power_scheme=1" "options iwlwifi uapsd_disable=1" ];
};
impermanence.enable = true;
networking =
{
hostname = "pc";
nebula = { enable = true; lighthouse = "vps6.chn.moe"; };
};
networking = { hostname = "pc"; nebula = { enable = true; lighthouse = "vps6.chn.moe"; }; };
sops = { enable = true; keyPathPrefix = "/nix/persistent"; };
};
hardware =
@@ -201,11 +197,7 @@
};
};
firewall.trustedInterfaces = [ "virbr0" "waydroid0" ];
acme =
{
enable = true;
certs = [ "debug.mirism.one" ];
};
acme = { enable = true; certs = [ "debug.mirism.one" ]; };
frpClient =
{
enable = true;
@@ -260,11 +252,7 @@
};
kernel.patches = [ "preempt" ];
impermanence.enable = true;
networking =
{
hostname = "vps6";
nebula.enable = true;
};
networking = { hostname = "vps6"; nebula.enable = true; };
sops = { enable = true; keyPathPrefix = "/nix/persistent"; };
};
packages.packageSet = "server";
@@ -376,7 +364,7 @@
};
kernel.patches = [ "preempt" ];
impermanence.enable = true;
networking.hostname = "vps7";
networking = { hostname = "vps7"; nebula = { enable = true; lighthouse = "vps6.chn.moe"; }; };
sops = { enable = true; keyPathPrefix = "/nix/persistent"; };
};
packages =

8
modules/system/networking/nebula/vps7.crt
View File

@@ -1,6 +1,6 @@
-----BEGIN NEBULA CERTIFICATE-----
CmIKBHZwczcSCoKkoYUMgP7//w8okpnBpwYwr/7FtgY6IAeBowLj1DamSObhmIF7
bb1tBTjnl4dvRPQSOY3JflBfSiAo7vm1Rn2zSiq4Ve0gjV4Ws4MlWWIoBq836bx8
2p2n1hJAoCxYon4eLiRfMfmhQR9fKC+8kn3QwILjdvUpn6EyMOZJfOEfeNbm0Ffh
aedtdOdvl3Gd1WJ45HrZXwHE+nRSCQ==
CmIKBHZwczcSCoKkoYUMgP7//w8o0tLQpwYwr/7FtgY6IAfUVax3Lgpt4p9jI4XE
kVkigGDyTo4jeMbTexago5oKSiAo7vm1Rn2zSiq4Ve0gjV4Ws4MlWWIoBq836bx8
2p2n1hJAQ9rquY/z2yiw6fuOCmBF4tT+358MnMd0S6p6fv5fivDsdj7mRLIvmtRl
NRQWKWoHePoivyLu89ZtvyQwFSNRAw==
-----END NEBULA CERTIFICATE-----

6
secrets/vps7.yaml
View File

@@ -30,6 +30,8 @@ synapse:
macaroon: ENC[AES256_GCM,data:SUJe+4q7QlWBceL/cyJxrjl9OV9o2//YEu3k4rzRRg3eSgiDphyL8MWzoO/WH8MzaH8=,iv:2tTQVj9kHa3Lb3ZqnxwSfpyWEDq77gtxS+iBqKuTLpY=,tag:XnKKMg8sxw3WQtJvfcyXcA==,type:str]
form: ENC[AES256_GCM,data:N/5El9TMbVL0zKTiTgtjdhk3PeRmWV7grckZ6NrroaXqt0I1HCCUGJQA+Qd7fp5SKV0=,iv:AfP6PrsyU6cCQa3LEUivN3k5pv/JARVzEigHJLopasU=,tag:CT0/7czF+VNnlb5yN8EZXg==,type:str]
signing-key: ENC[AES256_GCM,data:ZCayvU2lElUnuyVDL05XjO3v2P78ha9i9PEcLvpBLgNeYkh7nH9Z4kIAP6Pmbw39ufaSJuo5tZZPmA==,iv:CfxqL7dJbmG/jEcdDe+Su8uxsA4dkOq/CCOGlb3EDIk=,tag:9728QS3GLnTcerzDgtQEWw==,type:str]
nebula:
key: ENC[AES256_GCM,data:9o6EkfTWOU0KwnJsgHML4E7VOfzo3LHnlOkV8ubhi6aayXImC3lAaoPrqUI=,iv:KHprijN7z+4FIIW+D5klDM9a9VzMJ5xawPc7jJtbHmk=,tag:0DAmxoz8D5f38ndPbkNW+g==,type:str]
sops:
kms: []
gcp_kms: []
@@ -54,8 +56,8 @@ sops:
SnFHS1Z0SXUzTFdEd29KTy9DU3Y3R0UKfhh+rUmWDrf+UGjclP57dHipPLFoXSqy
HdelmfV6q4/c7ppx2E+oZw3VNgoZCsrxxzYZfwxHJiZb+5vkE0D8iA==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-08-29T14:07:02Z"
mac: ENC[AES256_GCM,data:vfAdG15p0USMgctkoiw9ynZUOAxTW2rsJBt3UY91N6h1GBW4oqBQWuksj49fCJX/CmsQDdjV9wS0VGEbx8aIcVizwmDSfnYMS2Dxe9A7caGOvCGahomasLrR0HfKRXrrx45fXTz9fxCxiNniUZGkiXIJ1VcQYf/jdidGFNSQm+c=,iv:MZpghtpGDf1Upez7sglLhnskkCXPFlEww4GDY6/2hjA=,tag:FFCjm3RVxFfh9IhwUC3ziQ==,type:str]
lastmodified: "2023-09-03T06:37:14Z"
mac: ENC[AES256_GCM,data:O22B3FRhxTxsIw3KQz0Qr/jNdv/HCr9OY1eCg+z6CF1uCB7SBEcJCaSK9UD57z5SLfGwKqnTlQUy/NsPyDye5+sSXQJy+58tNKw0pabTyyZ2EVNp2WRWEZ4LY2jxT+CmAslqB1Aq7bfahwGqyaRv1fAIkGQwCEmMIv1tzloDhj8=,iv:qYIWc7Yv1YQ8ySxfzcZ2ONtcBRC1825s53D6FjDSZNE=,tag:Ez3EPM6gwT84mVPEXAEZvg==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.7.3