1{config, ...}: {
2 age.secrets.netbirdClientKey = {
3 file = ../../../secrets/netbirdClientKey.age;
4 mode = "660";
5 owner = "netbird-wt0";
6 group = "netbird-wt0";
7 };
8
9 services.netbird.clients.wt0 = let
10 mgmtUrl = {
11 Scheme = "https";
12 Host = "${config.services.netbird.server.domain}:443";
13 };
14 in {
15 port = 51820;
16 config = {
17 ManagementURL = mgmtUrl;
18 AdminURL = mgmtUrl;
19 };
20 };
21 systemd.services.netbird-wt0.postStart = ''
22 /run/current-system/sw/bin/netbird-wt0 login --setup-key-file ${config.age.secrets.netbirdClientKey.path}
23 '';
24 users.users.root.extraGroups = ["netbird-wt0"];
25}