sascha.koenig
165ac75ba9
Agent Network needs NB_PROXY_PRIVATE=true on the single existing reverse-proxy, not a separate container. The previous standalone an-proxy had no TLS cert (removed certs volume + ACME) and crashed with 'open certs/tls.crt: no such file', so its overlay peer IP (100.91.226.149) never came up and drop.p.az-gruppe.com timed out. The auto-generated endpoint under the existing *.p.az-gruppe.com wildcard (drop.p.az-gruppe.com -> overlay peer IP via MagicDNS) is the correct URL; the invented a.az-gruppe.com had no DNS. - set NB_PROXY_PRIVATE=true on netbird-proxy (keeps ACME + certs) - remove standalone netbird-an-proxy container, anProxyIp, anProxyDomain - drop netbird-an-proxy-env secret (nix refs + age file)
65 lines
3.7 KiB
Nix
65 lines
3.7 KiB
Nix
let
|
|
#SYSTEMS
|
|
AZ-CLD-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItSijmU5YwcJcoshtmYxpxBaVA4TPaCMk23ws7KDkAH";
|
|
AZ-LT-NIX = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIg/nFOPx763xIbepPsdYRE49R7HwvikXhLF/iPgH1Jh";
|
|
AZ-PRM-1 = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID6gl9maUQ99I4t8mCAdfUw6lrA9NYx2EbwqGOmKts+l";
|
|
|
|
#USERS
|
|
sascha.koenig = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEZbg/Z9mnflXuLahGY8WOSBMqbgeqVIkIwRkquys1Ml";
|
|
jannik.mueller = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPvZazSuIoWoRWhkAqQDMLeurxVUyy1MTllp1wfw1tzq";
|
|
|
|
users = [sascha.koenig];
|
|
systems = [AZ-CLD-1 AZ-LT-NIX AZ-PRM-1];
|
|
in {
|
|
"secrets/azion-env.age".publicKeys = systems ++ users;
|
|
"secrets/server.crt.age".publicKeys = systems ++ users;
|
|
"secrets/server.key.age".publicKeys = systems ++ users;
|
|
"secrets/traefik-env.age".publicKeys = systems ++ users;
|
|
"secrets/baserow-db.age".publicKeys = systems ++ users;
|
|
"secrets/baserow-env.age".publicKeys = systems ++ users;
|
|
"secrets/kestra-env.age".publicKeys = systems ++ users;
|
|
"secrets/kestra-config.age".publicKeys = systems ++ users;
|
|
"secrets/kestra-secrets.age".publicKeys = systems ++ users;
|
|
"secrets/kestractl-env.age".publicKeys = systems ++ users;
|
|
"secrets/librechat-env.age".publicKeys = systems ++ users;
|
|
"secrets/librechat.age".publicKeys = systems ++ users;
|
|
"secrets/librechat-env-prod.age".publicKeys = systems ++ users;
|
|
"secrets/librechat-env-dev.age".publicKeys = systems ++ users;
|
|
"secrets/litellm-env.age".publicKeys = systems ++ users;
|
|
"secrets/litellm-prometheus-bearer.age".publicKeys = [AZ-PRM-1] ++ users;
|
|
"secrets/metabase-env.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-env.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-env-prm.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-db.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-runner-auth-token-cld.age".publicKeys = systems ++ users;
|
|
"secrets/n8n-runner-auth-token-prm.age".publicKeys = systems ++ users;
|
|
"secrets/cld-var-backup-sync-ssh-key.age".publicKeys = [AZ-CLD-1] ++ users;
|
|
"secrets/netbird-auth-secret.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-db-password.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-encryption-key.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-dashboard-env.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-server-env.age".publicKeys = systems ++ users;
|
|
"secrets/netbird-proxy-env.age".publicKeys = systems ++ users;
|
|
"secrets/outline-env.age".publicKeys = systems ++ users;
|
|
"secrets/snipe-it-app-key.age".publicKeys = systems ++ users;
|
|
"secrets/snipe-it-db-password.age".publicKeys = systems ++ users;
|
|
"secrets/snipe-it-mail-password.age".publicKeys = systems ++ users;
|
|
"secrets/pgadmin-pw.age".publicKeys = systems ++ users;
|
|
"secrets/phishboard-env.age".publicKeys = systems ++ users;
|
|
"secrets/vaultwarden-env.age".publicKeys = systems ++ users;
|
|
"secrets/vaultwarden-db.age".publicKeys = systems ++ users;
|
|
"secrets/zammad-pw.age".publicKeys = systems ++ users;
|
|
"secrets/zammad-secret.age".publicKeys = systems ++ users;
|
|
"secrets/zammad-hr-env.age".publicKeys = systems ++ users;
|
|
"secrets/zammad-hr-env-prod.age".publicKeys = systems ++ users;
|
|
"secrets/outline-key.age".publicKeys = systems ++ users;
|
|
"secrets/ref-key.age".publicKeys = systems ++ users;
|
|
"secrets/exa-key.age".publicKeys = systems ++ users;
|
|
"secrets/grafana-admin-pw.age".publicKeys = systems ++ users;
|
|
"secrets/grafana-db-password.age".publicKeys = systems ++ users;
|
|
"secrets/grafana-secret-key.age".publicKeys = systems ++ users;
|
|
"secrets/monitoring-loki-htpasswd.age".publicKeys = [AZ-PRM-1] ++ users;
|
|
"secrets/monitoring-loki-remote-env.age".publicKeys = [AZ-CLD-1] ++ users;
|
|
"secrets/ntfy-grafana-webhook.age".publicKeys = systems ++ users;
|
|
}
|