Jaculabilis
/
nixos-configs
1
1
Fork 0
Code Releases Activity

Enable beatific.isLighthouse and defaults.nebula

This commit is contained in:
Jaculabilis 2023-08-02 18:11:53 +00:00
parent 43c19146a9
commit c13fabbdbc
1 changed files with 1 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
machine/empyrean/default.nix
View File

@ -16,9 +16,7 @@
];
beatific.hostName = "empyrean";
beatific.defaults = {
nebula = false;
};
beatific.isLighthouse = true;
# Use the GRUB 2 boot loader.
boot.loader.grub = {
@ -95,31 +93,6 @@
chroot = false;
};
services.nebula.networks.beatific = {
enable = true;
# Network certificate and host credentials
ca = "/etc/nebula/beatific/beatific.crt";
cert = "/etc/nebula/beatific/empyrean.crt";
key = "/etc/nebula/beatific/empyrean.key";
# This host has a well-known IP at its VPS host, so it can function as a lighthouse/entry node
isLighthouse = true;
# Listen to connection requests from the public Internet
listen.port = 4242;
listen.host = "vpn.alogoulogoi.com";
# Don't filter anything at the VPN level
firewall.outbound = [ { port = "any"; proto = "any"; host = "any"; } ];
firewall.inbound = [ { port = "any"; proto = "any"; host = "any"; } ];
settings = {
# Enable UDP holepunching both ways, which allows nodes to establish more direct connections with each other
punchy = { punch = true; response = true; };
};
};
services.intake = {
listen = { addr = "10.22.20.1"; port = 5234; };
users.tvb.enable = true;