sascha.koenig
165ac75ba9
Agent Network needs NB_PROXY_PRIVATE=true on the single existing reverse-proxy, not a separate container. The previous standalone an-proxy had no TLS cert (removed certs volume + ACME) and crashed with 'open certs/tls.crt: no such file', so its overlay peer IP (100.91.226.149) never came up and drop.p.az-gruppe.com timed out. The auto-generated endpoint under the existing *.p.az-gruppe.com wildcard (drop.p.az-gruppe.com -> overlay peer IP via MagicDNS) is the correct URL; the invented a.az-gruppe.com had no DNS. - set NB_PROXY_PRIVATE=true on netbird-proxy (keeps ACME + certs) - remove standalone netbird-an-proxy container, anProxyIp, anProxyDomain - drop netbird-an-proxy-env secret (nix refs + age file)
109 lines
2.9 KiB
Nix
109 lines
2.9 KiB
Nix
{
|
|
age = {
|
|
secrets = {
|
|
traefik-env = {
|
|
file = ../../secrets/traefik-env.age;
|
|
};
|
|
monitoring-loki-remote-env = {
|
|
file = ../../secrets/monitoring-loki-remote-env.age;
|
|
owner = "root";
|
|
group = "root";
|
|
mode = "0400";
|
|
};
|
|
baserow-env = {
|
|
file = ../../secrets/baserow-env.age;
|
|
};
|
|
librechat = {
|
|
file = ../../secrets/librechat.age;
|
|
};
|
|
librechat-env = {
|
|
file = ../../secrets/librechat-env.age;
|
|
};
|
|
librechat-env-dev = {
|
|
file = ../../secrets/librechat-env-dev.age;
|
|
};
|
|
librechat-env-prod = {
|
|
file = ../../secrets/librechat-env-prod.age;
|
|
};
|
|
litellm-env = {
|
|
file = ../../secrets/litellm-env.age;
|
|
};
|
|
metabase-env = {
|
|
file = ../../secrets/metabase-env.age;
|
|
};
|
|
n8n-env = {
|
|
file = ../../secrets/n8n-env.age;
|
|
};
|
|
n8n-runner-auth-token = {
|
|
file = ../../secrets/n8n-runner-auth-token-cld.age;
|
|
};
|
|
cld-var-backup-sync-ssh-key = {
|
|
file = ../../secrets/cld-var-backup-sync-ssh-key.age;
|
|
owner = "root";
|
|
group = "root";
|
|
mode = "0400";
|
|
};
|
|
netbird-auth-secret = {
|
|
file = ../../secrets/netbird-auth-secret.age;
|
|
};
|
|
netbird-db-password = {
|
|
file = ../../secrets/netbird-db-password.age;
|
|
};
|
|
netbird-encryption-key = {
|
|
file = ../../secrets/netbird-encryption-key.age;
|
|
};
|
|
netbird-dashboard-env = {
|
|
file = ../../secrets/netbird-dashboard-env.age;
|
|
};
|
|
netbird-server-env = {
|
|
file = ../../secrets/netbird-server-env.age;
|
|
};
|
|
netbird-proxy-env = {
|
|
file = ../../secrets/netbird-proxy-env.age;
|
|
};
|
|
outline-env = {
|
|
file = ../../secrets/outline-env.age;
|
|
owner = "outline";
|
|
};
|
|
snipe-it-app-key = {
|
|
file = ../../secrets/snipe-it-app-key.age;
|
|
owner = "snipeit";
|
|
};
|
|
snipe-it-db-password = {
|
|
file = ../../secrets/snipe-it-db-password.age;
|
|
owner = "snipeit";
|
|
};
|
|
snipe-it-mail-password = {
|
|
file = ../../secrets/snipe-it-mail-password.age;
|
|
owner = "snipeit";
|
|
};
|
|
pgadmin-pw = {
|
|
file = ../../secrets/pgadmin-pw.age;
|
|
owner = "pgadmin";
|
|
};
|
|
vaultwarden-env = {
|
|
file = ../../secrets/vaultwarden-env.age;
|
|
};
|
|
hetzner-s3-az-intern-secret-key = {
|
|
file = ../../secrets/hetzner-s3-az-intern-secret-key.age;
|
|
owner = "outline";
|
|
};
|
|
hetzner-s3-az-intern-access-key = {
|
|
file = ../../secrets/hetzner-s3-az-intern-access-key.age;
|
|
};
|
|
zammad-pw = {
|
|
file = ../../secrets/zammad-pw.age;
|
|
};
|
|
zammad-secret = {
|
|
file = ../../secrets/zammad-secret.age;
|
|
};
|
|
zammad-hr-env-prod = {
|
|
file = ../../secrets/zammad-hr-env-prod.age;
|
|
};
|
|
zammad-hr-env = {
|
|
file = ../../secrets/zammad-hr-env.age;
|
|
};
|
|
};
|
|
};
|
|
}
|