commit 13a0501059f8f7724e4698fadef09b7ed65ace39 · ptr.pet/ark

+17 -2
hosts/wolumonde/modules/netbird.nix
···

       1
       1
        
       { config, ... }:

     

       2
       2
        
       let

     

       3
       3
       +
         cfg = config.services.netbird.server;

     

       3
       4
        
         oidcUrl = config.services.pocket-id.settings.APP_URL;

     

       4
       5
        
         oidcClientId = "41f4ea08-a20f-43dc-aa75-c76efa49bbb8";

     

       5
       6
        
       in

     
···

       24
       25
        
             AUTH_CLIENT_ID = oidcClientId;

     

       25
       26
        
             AUTH_AUDIENCE = oidcClientId;

     

       26
       27
        
           };

     

       28
       28
       +
           signal.metricsPort = 9091;

     

       27
       29
        
           management = {

     

       28
       30
        
             metricsPort = 9409;

     

       29
       31
        
             oidcConfigEndpoint = "${oidcUrl}/.well-known/openid-configuration";

     

       30
       30
       -
             turnDomain = config.services.netbird.server.domain;

     

       32
       32
       +
             turnDomain = cfg.domain;

     

       31
       33
        
             settings = {

     

       32
       34
        
               TURNConfig.Secret._secret = config.age.secrets.netbirdTurnSecret.path;

     

       33
       35
        
               DataStoreEncryptionKey._secret = config.age.secrets.netbirdDataStoreEncKey.path;

     
···

       51
       53
        
           };

     

       52
       54
        
         };

     

       53
       55
        
       

     

       54
       54
       -
         services.nginx.virtualHosts.${config.services.netbird.server.domain} = {

     

       56
       56
       +
         services.nginx.virtualHosts.${cfg.domain} = {

     

       55
       57
        
           useACMEHost = "gaze.systems";

     

       56
       58
        
           forceSSL = true;

     

       57
       59
        
           quic = true;

     

       58
       60
        
           kTLS = true;

     

       59
       61
        
         };

     

       62
       62
       +
       

     

       63
       63
       +
         services.victoriametrics.prometheusConfig.scrape_configs = [

     

       64
       64
       +
           {

     

       65
       65
       +
             job_name = "netbird_management";

     

       66
       66
       +
             metrics_path = "/metrics";

     

       67
       67
       +
             static_configs = [ { targets = [ "localhost:${toString cfg.management.metricsPort}" ]; } ];

     

       68
       68
       +
           }

     

       69
       69
       +
           {

     

       70
       70
       +
             job_name = "netbird_signal";

     

       71
       71
       +
             metrics_path = "/metrics";

     

       72
       72
       +
             static_configs = [ { targets = [ "localhost${toString cfg.signal.metricsPort}" ]; } ];

     

       73
       73
       +
           }

     

       74
       74
       +
         ];

     

       60
       75
        
       }