45 lines
958 B
Nix
45 lines
958 B
Nix
{
|
|
config,
|
|
lib,
|
|
namespace,
|
|
...
|
|
}:
|
|
with lib;
|
|
let
|
|
name = "nebula-lighthouse";
|
|
cfg = config.${namespace}.services.${name};
|
|
rootUrl = "https://lighthouse.${namespace}.dev/";
|
|
ca = config.sops.secrets."jallen-nas/nebula/ca-cert".path;
|
|
cert = config.sops.secrets."jallen-nas/nebula/nas-cert".path;
|
|
key = config.sops.secrets."jallen-nas/nebula/nas-key".path;
|
|
|
|
nebulaConfig = lib.${namespace}.mkModule {
|
|
inherit config name;
|
|
description = "nebula";
|
|
options = { };
|
|
moduleConfig = {
|
|
environment.systemPackages = with pkgs; [ nebula ];
|
|
services.nebula.networks = {
|
|
jallen-nebula = {
|
|
enable = true;
|
|
enableReload = true;
|
|
isLighthouse = false;
|
|
isRelay = false;
|
|
ca = ca;
|
|
cert = cert;
|
|
key = key;
|
|
lighthouses = [
|
|
"10.1.1.1"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
in
|
|
{
|
|
imports = [
|
|
nebulaConfig
|
|
./sops.nix
|
|
];
|
|
}
|