Nebula: Difference between revisions
Yesaslrocks (talk | contribs) m added node/client config for nebula mesh network. |
|||
| Line 10: | Line 10: | ||
A simple configuration may look like: | A simple lighthouse configuration may look like: | ||
<syntaxhighlight lang="nix"> | <syntaxhighlight lang="nix"> | ||
| Line 23: | Line 23: | ||
</syntaxhighlight> | </syntaxhighlight> | ||
A node configuration may look like: | |||
<syntaxhighlight lang="nix"> | |||
environment.systemPackages = with pkgs; [ nebula ]; | |||
services.nebula.networks.mesh = { | |||
enable = true; | |||
isLighthouse = false; | |||
lighthouses = [ "192.168.100.1" ]; | |||
settings = { | |||
cipher= "aes"; | |||
}; | |||
cert = "/etc/nebula/host.crt"; | |||
key = "/etc/nebula/host.key"; | |||
ca = "/etc/nebula/ca.crt"; | |||
staticHostMap = { | |||
"192.168.100.1" = [ | |||
"PUBLICLIGHTHOUSEIPHERE:4242" | |||
]; | |||
}; | |||
firewall.outbound = [ | |||
{ | |||
host = "any"; | |||
port = "any"; | |||
proto = "any"; | |||
} | |||
]; | |||
firewall.inbound = [ | |||
{ | |||
host = "any"; | |||
port = "any"; | |||
proto = "any"; | |||
} | |||
]; | |||
}; | |||
</syntaxhighlight> | |||
The configuration files in `/etc/nebula` need to be readable by the Nebula service: | The configuration files in `/etc/nebula` need to be readable by the Nebula service: | ||