Add nebula and remove tinc
This commit is contained in:
parent
5d9e3164e4
commit
fb87cb5dbd
|
@ -155,13 +155,32 @@
|
||||||
};
|
};
|
||||||
};*/
|
};*/
|
||||||
|
|
||||||
/*services.tinc.networks = {
|
services.nebula.networks.beatific = {
|
||||||
beatific = {
|
enable = true;
|
||||||
name = "catacomb";
|
|
||||||
listenAddress = "0.0.0.0";
|
# Network certificate and host credentials
|
||||||
chroot = false;
|
ca = "/etc/nebula/beatific/beatific.crt";
|
||||||
|
cert = "/etc/nebula/beatific/catacomb.crt";
|
||||||
|
key = "/etc/nebula/beatific/catacomb.key";
|
||||||
|
|
||||||
|
listen.port = 4242;
|
||||||
|
|
||||||
|
# Connect to the lighthouse at empyrean
|
||||||
|
# Note that this is a VPN address, not a public address
|
||||||
|
lighthouses = [ "10.22.20.1" ];
|
||||||
|
|
||||||
|
# Map the lighthouse address to its public address
|
||||||
|
staticHostMap = { "10.22.20.1" = [ "vpn.alogoulogoi.com:4242" ]; };
|
||||||
|
|
||||||
|
# Don't filter anything at the VPN level
|
||||||
|
firewall.outbound = [ { port = "any"; proto = "any"; host = "any"; } ];
|
||||||
|
firewall.inbound = [ { port = "any"; proto = "any"; host = "any"; } ];
|
||||||
|
|
||||||
|
settings = {
|
||||||
|
# Enable UDP holepunching both ways, which allows nodes to establish more direct connections with each other
|
||||||
|
punchy = { punch = true; response = true; };
|
||||||
|
};
|
||||||
};
|
};
|
||||||
};*/
|
|
||||||
|
|
||||||
services.zfs = {
|
services.zfs = {
|
||||||
autoScrub = {
|
autoScrub = {
|
||||||
|
|
Loading…
Reference in New Issue