zuckerberg/nix-config
zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

Attempt at making firezone work

Browse Source
This commit is contained in:
Zuckerberg 2025-03-30 20:54:41 -07:00
parent 1c9fa418b3
commit 26860d2119
6 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
machines/howl/default.nix
View File

@ -9,4 +9,20 @@
nix.distributedBuilds = lib.mkForce false; nix.distributedBuilds = lib.mkForce false;
nix.gc.automatic = lib.mkForce false; nix.gc.automatic = lib.mkForce false;
services.resolved.enable = true;
# services.firezone.headless-client = {
# enable = true;
# name = config.networking.hostName;
# apiUrl = "wss://api.firezone.dev/";
# tokenFile = "/run/agenix/firezone-token";
# };
# age.secrets.firezone-token.file = ../../secrets/firezone-token.age;
# services.firezone.gui-client = {
# enable = true;
# name = config.networking.hostName;
# allowedUsers = [ "googlebot" ];
# };
} }

1
machines/howl/properties.nix
View File

@ -7,6 +7,7 @@
systemRoles = [ systemRoles = [
"personal" "personal"
"firezone"
]; ];
hostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEQi3q8jU6vRruExAL60J7GFO1gS8HsmXVJuKRT4ljrG"; hostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEQi3q8jU6vRruExAL60J7GFO1gS8HsmXVJuKRT4ljrG";

1
machines/ponyo/properties.nix
View File

@ -16,6 +16,7 @@
"dailybot" "dailybot"
"gitea" "gitea"
"librechat" "librechat"
"firezone"
]; ];
hostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMBBlTAIp38RhErU1wNNV5MBeb+WGH0mhF/dxh5RsAXN"; hostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMBBlTAIp38RhErU1wNNV5MBeb+WGH0mhF/dxh5RsAXN";

1
machines/storage/s0/properties.nix
View File

@ -14,6 +14,7 @@
"gitea-actions-runner" "gitea-actions-runner"
"frigate" "frigate"
"zigbee" "zigbee"
"firezone"
]; ];
hostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAwiXcUFtAvZCayhu4+AIcF+Ktrdgv9ee/mXSIhJbp4q"; hostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAwiXcUFtAvZCayhu4+AIcF+Ktrdgv9ee/mXSIhJbp4q";

BIN
secrets/firezone-token.age Normal file
View File

Binary file not shown.

3
secrets/secrets.nix
View File

@ -60,4 +60,7 @@ with roles;
# zigbee2mqtt secrets # zigbee2mqtt secrets
"zigbee2mqtt.yaml.age".publicKeys = zigbee; "zigbee2mqtt.yaml.age".publicKeys = zigbee;
# Firezone Token
"firezone-token.age".publicKeys = firezone;
} }