feat: netbird agent network private proxy

Add dedicated NB_PROXY_PRIVATE=true reverse-proxy (netbird-an-proxy)
serving agent-network synth endpoints over the WireGuard overlay only.
Configured via NB_PROXY_* env vars, no domain/ACME/Traefik/host port.
Register netbird-an-proxy-env secret.
This commit is contained in:
2026-08-04 09:37:51 +02:00
parent e836b23c66
commit f7a5eeefa1
4 changed files with 41 additions and 1 deletions
+1
View File
@@ -40,6 +40,7 @@ in {
"secrets/netbird-dashboard-env.age".publicKeys = systems ++ users;
"secrets/netbird-server-env.age".publicKeys = systems ++ users;
"secrets/netbird-proxy-env.age".publicKeys = systems ++ users;
"secrets/netbird-an-proxy-env.age".publicKeys = systems ++ users;
"secrets/outline-env.age".publicKeys = systems ++ users;
"secrets/snipe-it-app-key.age".publicKeys = systems ++ users;
"secrets/snipe-it-db-password.age".publicKeys = systems ++ users;