diff --git a/hosts/common/core/nebula.nix b/hosts/common/core/nebula.nix deleted file mode 100644 index 9030247..0000000 --- a/hosts/common/core/nebula.nix +++ /dev/null @@ -1,40 +0,0 @@ -{ - config, - lib, - inputs, - ... -}: let - s = inputs.nix-secrets.network.mesh; -in { - warnings = - if !builtins.hasAttr "${config.hostSpec.hostName}" s.hosts - then [''Hey you don't have a nebula config for this host, you should fix this ASAP so you can be connected to the mesh. If you don't know how to do this then contact your admin''] - else []; - - sops.secrets."keys/nebula" = lib.mkIf (builtins.hasAttr "${config.hostSpec.hostName}" s.hosts) { - owner = "nebula-wce"; - inherit (config.users.users.${config.hostSpec.username}) group; - }; - services.nebula.networks.wce = lib.mkIf (builtins.hasAttr "${config.hostSpec.hostName}" s.hosts) { - inherit (s) ca lighthouses staticHostMap; - inherit (s.hosts.${config.hostSpec.hostName}) cert isLighthouse; - key = config.sops.secrets."keys/nebula".path; - enable = true; - firewall = lib.mkIf (!config.services.nebula.networks.wce.isLighthouse) { - inbound = [ - { - host = "any"; - port = "any"; - proto = "any"; - } - ]; - outbound = [ - { - host = "any"; - port = "any"; - proto = "any"; - } - ]; - }; - }; -}