netbird: change STUN to port 3479, add trustedHTTPProxies

modules/k3s/k3s.nix

@@ -1,6 +1,6 @@
 {
   networking.firewall.allowedTCPPorts = [ 6443 80 443 33073 ];
-  networking.firewall.allowedUDPPorts = [ 3478 ];
+  networking.firewall.allowedUDPPorts = [ 3479 ];
 
   services.k3s = {
     enable = true;

modules/k3s/netbird/config.yaml

@@ -12,6 +12,8 @@ data:
       healthcheckAddress: ":9000"
       logLevel: "info"
       logFile: "console"
+      stunPorts:
+        - 3479
       tls:
         certFile: ""
         keyFile: ""
@@ -21,7 +23,7 @@ data:
           domains: []
           email: ""
           awsRoute53: false
-      authSecret: "CHANGE_ME_openssl_rand_-hex_32"
+      authSecret: "182c13eec94ba6ef89ce8f3e33b4694b051fe4b0bf6d2c9188f738d1c000b6d7"
       dataDir: "/var/lib/netbird/"
       disableAnonymousMetrics: false
       disableGeoliteUpdate: false
@@ -38,3 +40,6 @@ data:
         engine: "sqlite"
         dsn: ""
         encryptionKey: ""
+      reverseProxy:
+        trustedHTTPProxies:
+          - "10.0.1.45/32"

modules/k3s/netbird/server.yaml

@@ -19,7 +19,7 @@ spec:
           args: ["--config", "/etc/netbird/config.yaml"]
           ports:
             - containerPort: 80
-            - containerPort: 3478
+            - containerPort: 3479
               protocol: UDP
             - containerPort: 33073
           volumeMounts:
@@ -63,6 +63,6 @@ spec:
       port: 33073
       targetPort: 33073
     - name: stun
-      port: 3478
-      targetPort: 3478
+      port: 3479
+      targetPort: 3479
       protocol: UDP