netbird: fresh setup routed through built-in traefik, secrets via kubectl not git

2026-07-30 18:27:55 -05:00
parent eadba798ea
commit 8b65c53a11
6 changed files with 236 additions and 1 deletions
@@ -1,9 +1,17 @@
 {
-  networking.firewall.allowedTCPPorts = [ 6443 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 6443 80 443 33073 ];
+  networking.firewall.allowedUDPPorts = [ 3479 ];

  services.k3s = {
    enable = true;
    role = "server";
    extraFlags = "--write-kubeconfig-mode 644";
+    manifests = {
+      netbird-namespace = { source = ./netbird/namespace.yaml; };
+      netbird-config    = { source = ./netbird/config.yaml; };
+      netbird-server    = { source = ./netbird/server.yaml; };
+      netbird-dashboard = { source = ./netbird/dashboard.yaml; };
+      netbird-ingress   = { source = ./netbird/ingress.yaml; };
+    };
  };
 }