nixos-configs/devices/cluster/modules/headscale/default.nix

68 lines
1.7 KiB
Nix
Raw Normal View History

2023-11-28 21:43:26 -05:00
{
config,
2023-11-28 21:43:26 -05:00
headscale,
lib,
2023-11-28 21:43:26 -05:00
pkgs,
...
}: let
2024-01-22 11:09:37 -05:00
inherit (builtins) readFile;
inherit (config.vars) mainUser hostName;
headscale-flake = headscale.packages.${pkgs.system}.headscale;
clusterIP = config.services.pacemaker.virtualIps.caddy-vip.ip;
in {
environment.systemPackages = [headscale-flake];
users.users.${mainUser}.extraGroups = ["headscale"];
2023-11-28 21:43:26 -05:00
home-manager.users.${mainUser}
2024-01-22 11:09:37 -05:00
.programs.bash.bashrcExtra = lib.mkAfter (readFile ./completion.bash);
2023-11-28 21:43:26 -05:00
services.headscale = {
enable = true;
package = headscale-flake;
2023-11-28 21:43:26 -05:00
address = clusterIP;
2023-11-28 21:43:26 -05:00
port = 8085;
settings = {
server_url = "https://headscale.nelim.org";
ip_prefixes = ["100.64.0.0/10"];
metrics_listen_addr = "127.0.0.1:9090";
grpc_listen_addr = "0.0.0.0:50443";
grpc_allow_insecure = false;
disable_check_updates = true;
unix_socket_permission = "0770";
2023-11-28 21:43:26 -05:00
db_type = "sqlite3";
db_path = "/var/lib/headscale/db.sqlite";
private_key_path = "/var/lib/headscale/private.key";
noise.private_key_path = "/var/lib/headscale/noise_private.key";
dns_config = let
caddyIp =
if hostName == "thingone"
then "100.64.0.8"
else "100.64.0.9";
in {
2023-11-28 21:43:26 -05:00
magic_dns = false;
override_local_dns = true;
nameservers = [caddyIp];
2023-11-28 21:43:26 -05:00
};
derp = {
urls = [];
server = {
enabled = true;
stun_listen_addr = "${clusterIP}:3479";
2023-11-28 21:43:26 -05:00
private_key_path = "/var/lib/headscale/derp_server_private.key";
region_id = 995;
region_code = "mon";
region_name = "montreal";
};
};
};
};
}