nix config
- Nix 99.7%
- Just 0.3%
JMARyA
e05e1ffcac
Wraps the upstream netbird client module, which exposes no options for the control plane. NetBird maps flags to NB_<FLAG> env vars and the upstream module bakes `environment` into the CLI wrapper with --set-default, so the management/admin URL can be pinned there for both the daemon and interactive `netbird up`, with no setup key in the store. gato joins the self-hosted mesh with routing enabled (IP forwarding), so it can advertise the homelab LAN and act as an exit node. Enrollment stays manual SSO. `hardened` defaults to services.resolved.enable: without resolved, NetBird rewrites /etc/resolv.conf directly, which a hardened unit cannot do under ProtectSystem=strict — DNS would silently stop resolving. gato has no resolved, so the daemon runs as root there. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .secrets/home | ||
| .woodpecker | ||
| assets | ||
| machines | ||
| modules | ||
| vars/per-machine/wohnzimmer/state-version/version | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
| renovate.json | ||
❄️ Machines
NixOS & Darwin system configurations.