···

       
40
       
 
       


     

       
41
       
 
       
          If the {option}`persistentKeys` is enabled then the

     

       
42
       
 
       
          keys that are generated during activation will override

     

       
43
       
-
       
          those in {option}`config` or

     

       
44
       
 
       
          {option}`configFile`.

     

       
45
       
 
       


     

       
46
       
 
       
          If no keys are specified then ephemeral keys are generated

     

       
47
       
 
       
          and the Yggdrasil interface will have a random IPv6 address

     

       
48
       
 
       
          each time the service is started, this is the default.

     

       
49
       
 
       


     

       
50
       
-
       
          If both {option}`configFile` and {option}`config`

     

       
51
       
 
       
          are supplied, they will be combined, with values from

     

       
52
       
 
       
          {option}`configFile` taking precedence.

     

       
53
       
 
       


     
···

       
62
       
 
       
        example = "/run/keys/yggdrasil.conf";

     

       
63
       
 
       
        description = lib.mdDoc ''

     

       
64
       
 
       
          A file which contains JSON configuration for yggdrasil.

     

       
65
       
-
       
          See the {option}`config` option for more information.

     

       
66
       
 
       
        '';

     

       
67
       
 
       
      };

     

       
68
       
 
       


     
···

       
81
       
 
       
          discovery. The NixOS firewall blocks link-local

     

       
82
       
 
       
          communication, so in order to make local peering work you

     

       
83
       
 
       
          will also need to set `LinkLocalTCPPort` in your

     

       
84
       
-
       
          yggdrasil configuration ({option}`config` or

     

       
85
       
 
       
          {option}`configFile`) to a port number other than 0,

     

       
86
       
 
       
          and then add that port to

     

       
87
       
 
       
          {option}`networking.firewall.allowedTCPPorts`.

     

···

       
40
       
 
       


     

       
41
       
 
       
          If the {option}`persistentKeys` is enabled then the

     

       
42
       
 
       
          keys that are generated during activation will override

     

       
43
       
+
       
          those in {option}`settings` or

     

       
44
       
 
       
          {option}`configFile`.

     

       
45
       
 
       


     

       
46
       
 
       
          If no keys are specified then ephemeral keys are generated

     

       
47
       
 
       
          and the Yggdrasil interface will have a random IPv6 address

     

       
48
       
 
       
          each time the service is started, this is the default.

     

       
49
       
 
       


     

       
50
       
+
       
          If both {option}`configFile` and {option}`settings`

     

       
51
       
 
       
          are supplied, they will be combined, with values from

     

       
52
       
 
       
          {option}`configFile` taking precedence.

     

       
53
       
 
       


     
···

       
62
       
 
       
        example = "/run/keys/yggdrasil.conf";

     

       
63
       
 
       
        description = lib.mdDoc ''

     

       
64
       
 
       
          A file which contains JSON configuration for yggdrasil.

     

       
65
       
+
       
          See the {option}`settings` option for more information.

     

       
66
       
 
       
        '';

     

       
67
       
 
       
      };

     

       
68
       
 
       


     
···

       
81
       
 
       
          discovery. The NixOS firewall blocks link-local

     

       
82
       
 
       
          communication, so in order to make local peering work you

     

       
83
       
 
       
          will also need to set `LinkLocalTCPPort` in your

     

       
84
       
+
       
          yggdrasil configuration ({option}`settings` or

     

       
85
       
 
       
          {option}`configFile`) to a port number other than 0,

     

       
86
       
 
       
          and then add that port to

     

       
87
       
 
       
          {option}`networking.firewall.allowedTCPPorts`.

     

···

       
27
       
 
       
      # The NixOS module will generate new keys and a new IPv6 address each time

     

       
28
       
 
       
      # it is started if persistentKeys is not enabled.

     

       
29
       
 
       


     

       
30
       
-
       
    config = {

     

       
31
       
 
       
      Peers = [

     

       
32
       
 
       
        # Yggdrasil will automatically connect and "peer" with other nodes it

     

       
33
       
 
       
        # discovers via link-local multicast annoucements. Unless this is the

     
···

       
58
       
 
       
  services.yggdrasil = {

     

       
59
       
 
       
    enable = true;

     

       
60
       
 
       
    persistentKeys = true; # Maintain a fixed public key and IPv6 address.

     

       
61
       
-
       
    config = {

     

       
62
       
 
       
      Peers = [ "tcp://1.2.3.4:1024" "tcp://1.2.3.5:1024" ];

     

       
63
       
 
       
      NodeInfo = {

     

       
64
       
 
       
        # This information is visible to the network.

     

···

       
27
       
 
       
      # The NixOS module will generate new keys and a new IPv6 address each time

     

       
28
       
 
       
      # it is started if persistentKeys is not enabled.

     

       
29
       
 
       


     

       
30
       
+
       
    settings = {

     

       
31
       
 
       
      Peers = [

     

       
32
       
 
       
        # Yggdrasil will automatically connect and "peer" with other nodes it

     

       
33
       
 
       
        # discovers via link-local multicast annoucements. Unless this is the

     
···

       
58
       
 
       
  services.yggdrasil = {

     

       
59
       
 
       
    enable = true;

     

       
60
       
 
       
    persistentKeys = true; # Maintain a fixed public key and IPv6 address.

     

       
61
       
+
       
    settings = {

     

       
62
       
 
       
      Peers = [ "tcp://1.2.3.4:1024" "tcp://1.2.3.5:1024" ];

     

       
63
       
 
       
      NodeInfo = {

     

       
64
       
 
       
        # This information is visible to the network.