chore: netbird update AZ-CLD-1

hosts/AZ-CLD-1/services/default.nix

@@ -6,6 +6,7 @@
     ./gotenberg.nix
     ./metabase.nix
     ./n8n.nix
+    ./netbird.nix
     ./ntfy.nix
     ./outline.nix
     ./postgres.nix

hosts/AZ-CLD-1/services/netbird.nix

@@ -0,0 +1,31 @@
+{pkgs, ...}: {
+  services.netbird = {
+    enable = true;
+    package = pkgs.unstable.netbird;
+  };
+
+  systemd.services.netbird = {
+    environment = {
+      NB_DISABLE_SSH_CONFIG = "true";
+    };
+    path = [
+      pkgs.shadow
+      pkgs.util-linux
+    ];
+  };
+
+  programs.ssh.extraConfig = ''
+    Match exec "${pkgs.netbird}/bin/netbird ssh detect %h %p"
+        PreferredAuthentications password,publickey,keyboard-interactive
+        PasswordAuthentication yes
+        PubkeyAuthentication yes
+        BatchMode no
+        ProxyCommand ${pkgs.netbird}/bin/netbird ssh proxy %h %p
+        StrictHostKeyChecking no
+        UserKnownHostsFile /dev/null
+        CheckHostIP no
+        LogLevel ERROR
+  '';
+
+  networking.firewall.checkReversePath = "loose";
+}

hosts/AZ-PRM-1/services/n8n.nix

@@ -15,7 +15,7 @@
     ];
 
     routers.n8n = {
-      rule = "Host(`wf.i.az-intec.com`)";
+      rule = "Host(`wf.l.az-gruppe.com`)";
       tls = {
         certResolver = "ionos";
       };

hosts/AZ-PRM-1/services/netbird.nix

@@ -0,0 +1,28 @@
+{pkgs, ...}: {
+  services.netbird.enable = true;
+
+  systemd.services.netbird = {
+    environment = {
+      NB_DISABLE_SSH_CONFIG = "true";
+    };
+    path = [
+      pkgs.shadow
+      pkgs.util-linux
+    ];
+  };
+
+  programs.ssh.extraConfig = ''
+    Match exec "${pkgs.netbird}/bin/netbird ssh detect %h %p"
+        PreferredAuthentications password,publickey,keyboard-interactive
+        PasswordAuthentication yes
+        PubkeyAuthentication yes
+        BatchMode no
+        ProxyCommand ${pkgs.netbird}/bin/netbird ssh proxy %h %p
+        StrictHostKeyChecking no
+        UserKnownHostsFile /dev/null
+        CheckHostIP no
+        LogLevel ERROR
+  '';
+
+  networking.firewall.checkReversePath = "loose";
+}

hosts/AZLT124-L/services/default.nix

@@ -1,12 +1,17 @@
-{
+{pkgs, ...}: {
   imports = [
     # ./ad.nix
     ./mem0.nix
     ./n8n.nix
+    ./netbird.nix
     ./sound.nix
     ./udev.nix
   ];
   services = {
+    espanso = {
+      enable = true;
+      package = pkgs.espanso-wayland;
+    };
     hypridle.enable = true;
     printing.enable = true;
     gvfs.enable = true;

hosts/AZLT124-L/services/netbird.nix

@@ -0,0 +1,28 @@
+{pkgs, ...}: {
+  services.netbird.enable = true;
+
+  systemd.services.netbird = {
+    environment = {
+      NB_DISABLE_SSH_CONFIG = "true";
+    };
+    path = [
+      pkgs.shadow
+      pkgs.util-linux
+    ];
+  };
+
+  programs.ssh.extraConfig = ''
+    Match exec "${pkgs.netbird}/bin/netbird ssh detect %h %p"
+        PreferredAuthentications password,publickey,keyboard-interactive
+        PasswordAuthentication yes
+        PubkeyAuthentication yes
+        BatchMode no
+        ProxyCommand ${pkgs.netbird}/bin/netbird ssh proxy %h %p
+        StrictHostKeyChecking no
+        UserKnownHostsFile /dev/null
+        CheckHostIP no
+        LogLevel ERROR
+  '';
+
+  networking.firewall.checkReversePath = "loose";
+}