chn/nixos
1
0
Fork 0
mirror of https://github.com/CHN-beta/nixos.git synced 2026-01-12 04:39:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

pc: enable nebula

Browse Source 
nebula fix firewall
This commit is contained in:
陈浩南
2023-08-31 17:37:45 +08:00
parent 9ae78ee549
commit b013ca70b3
3 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
flake.nix
View File

@@ -195,6 +195,7 @@
smartd.enable = true;
nginx = { enable = true; transparentProxy.enable = false; };
misskey = { enable = false; hostname = "xn--qbtm095lrg0bfka60z.chn.moe"; };
nebula = { enable = true; lighthouse = "vps6.chn.moe"; };
};
bugs =
[

4
modules/services/nebula/default.nix
View File

@@ -21,8 +21,10 @@ inputs:
key = inputs.config.sops.templates."nebula/key-template".path;
isLighthouse = nebula.lighthouse == null;
lighthouses = if nebula.lighthouse == null then [] else [ "192.168.82.1" ];
staticHostMap = if nebula.lighthouse == null then {} else { "192.168.82.1" = [ nebula.lighthouse ]; };
staticHostMap = if nebula.lighthouse == null then {} else { "192.168.82.1" = [ "${nebula.lighthouse}:4242" ]; };
listen.port = if nebula.lighthouse == null then 4242 else 0;
firewall.inbound = [ { host = "any"; port = "any"; proto = "any"; } ];
firewall.outbound = [ { host = "any"; port = "any"; proto = "any"; } ];
};
sops =
{

6
secrets/chn-PC.yaml
View File

@@ -16,6 +16,8 @@ redis:
misskey: ENC[AES256_GCM,data:SAcZsRrhNB+CjpcvUcWLi5nhEA49bFM+HYHEkszNdZs=,iv:fOLletIWzCrhHZrgwl5dpdCnwUbcEeTaKNosXna8pfU=,tag:EpdBW/RexAoJ0z1G2Emvww==,type:str]
meilisearch:
misskey: ENC[AES256_GCM,data:oBYIwQyfPyjsp1dfveVGqO7mY9LO7jaD+Mpe9nTm8Sd8XKgRPJWkce4tnBXBRzkdLURvDDD25uODUekdkkO1gA==,iv:/Gw3PX1w7dWWzEMCWrETGees8CjONwzIpTZSCkQsZXc=,tag:59GHYNPRTv3KFqhpUDXBLg==,type:str]
nebula:
key: ENC[AES256_GCM,data:kNm9hwMa/EhDeOCeZw1jEnroolTkeEeAxpSEDko6tHSDHwHbhfjr01ZzHKE=,iv:q2qCi99XgZJvRuF1dm16sK6BFIoa9QUN8p4LSiZq28o=,tag:ApOKdA91LBiWHv6TuXMkpA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -40,8 +42,8 @@ sops:
OUlxNjdQaXdXMkZ6bnV1ek4yZ2dpbkEKpKGOAxo5Eef2jtGrg4iSzmGCeg+vTgvu
+K8b+O19MIkGMDBm6UbYUPtc/7eqoEZRiTUzNMTmfkLVS4ul5zou9A==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2023-08-26T09:45:52Z"
mac: ENC[AES256_GCM,data:1Vpffu7dkRAB0BuxRg9M8K1KxQZoCilQxanVPPVq+9rPGkQPICpl8XN2pap8QlKZkY7tPmjvswCdNs95H7KTZ5ZrLwqwOcq0Vbmy8jxRN2aaW2Od1jLXzFfYgkI9ZCYBpWLHnOB54f7iuUk7qUXII1EKyMSdb/Z3Yu9mmLBJn1s=,iv:lAKtdZ54Ndnfj7HaCw0WXYgtwkdTC1gl4cKy7xZhiZ8=,tag:lgapPAurFrhBSG/GKwSAtQ==,type:str]
lastmodified: "2023-08-31T09:25:34Z"
mac: ENC[AES256_GCM,data:mRs5TzJar9SOYP6L1RSWsK9XvtDvRSksGll8aqmsv8h2k+u3/D7hVOPw3/eCP8gdsPzczWc+9zpy3OHAXHDNujrJsKVw2urjBAwKsAllBggakENhrFhxKW3NKkHplqQFs3w52XUozqEucsRA8+k2/RLZE+RjHBFLlNyDXYaBzGc=,iv:h9aTsCfwKc7wj1Sk2o7n+I4KN9B40gZ3aJ2t53e/TtE=,tag:h6kC3IoRgENJXPnUh0064g==,type:str]
pgp: []
unencrypted_suffix: _unencrypted
version: 3.7.3