21 lines
664 B
Nix
21 lines
664 B
Nix
{ config, ... }:
|
|
let
|
|
cfg = config.selfhosted.netbird;
|
|
in
|
|
{
|
|
sops.templates."nb-proxy.env".content = ''
|
|
NB_PROXY_DEBUG_LOGS=false
|
|
NB_PROXY_PROXY_PROTOCOL=true
|
|
NB_PROXY_MANAGEMENT_ADDRESS=http://${cfg.server.name}:80
|
|
NB_PROXY_ALLOW_INSECURE=true
|
|
NB_PROXY_DOMAIN=${cfg.subdomain}.${config.sops.placeholder."domains/serv"}
|
|
NB_PROXY_ADDRESS=:8443
|
|
NB_PROXY_TOKEN=${config.sops.placeholder."netbird/proxy/token"}
|
|
NB_PROXY_FORWARDED_PROTO=https
|
|
NB_PROXY_CERTIFICATE_DIRECTORY=/certs
|
|
NB_PROXY_ACME_CERTIFICATES=true
|
|
NB_PROXY_ACME_CHALLENGE_TYPE=tls-alpn-01
|
|
NB_PROXY_TRUSTED_PROXIES=${config.selfhosted.traefik.ip}
|
|
'';
|
|
}
|