mirror of
https://github.com/TheWanderingCrow/CrOS.git
synced 2026-02-06 12:48:53 -05:00
21 lines
762 B
Nix
21 lines
762 B
Nix
{
|
|
config,
|
|
lib,
|
|
inputs,
|
|
...
|
|
}: let
|
|
s = inputs.nix-secrets.network.mesh;
|
|
in {
|
|
warnings =
|
|
if !builtins.hasAttr "${config.hostSpec.hostName}" s.hosts
|
|
then [''Hey you don't have a nebula config for this host, you should fix this ASAP so you can be connected to the mesh. If you don't know how to do this then contact your admin'']
|
|
else [];
|
|
|
|
sops.secrets."keys/nebula" = lib.mkIf (builtins.hasAttr "${config.hostSpec.hostName}" s.hosts) {};
|
|
services.nebula.networks.wce = lib.mkIf (builtins.hasAttr "${config.hostSpec.hostName}" s.hosts) {
|
|
inherit (s) ca lighthouses staticHostMap;
|
|
inherit (s.hosts.${config.hostSpec.hostName}) cert isLighthouse firewall;
|
|
key = config.sops.secrets."keys/nebula".path;
|
|
enable = true;
|
|
};
|
|
}
|