123

devices/vds.nix

@@ -9,16 +9,18 @@ let
       ...
     }:
     {
-      imports = with inputs; [
-        (modulesPath + "/installer/scan/not-detected.nix")
-        (modulesPath + "/profiles/qemu-guest.nix")
+      imports =
+        with inputs;
+        [
+          (modulesPath + "/installer/scan/not-detected.nix")
+          (modulesPath + "/profiles/qemu-guest.nix")
 
-        ./disko/vds.nix
-        ./hardware/vds.nix
+          ./disko/vds.nix
+          ./hardware/vds.nix
 
-        disko.nixosModules.disko
-        self.nixosModules.default
-      ]
+          disko.nixosModules.disko
+          self.nixosModules.default
+        ]
         ++ builtins.attrValues inputs.self.nixosModules.vds;
 
       environment.systemPackages = map lib.lowPrio [

flake.nix

@@ -123,6 +123,7 @@
         };
         vds = {
           cloudflared = import ./modules/vds/cloudflared.nix flakeContext;
+          netbird = import ./modules/vds/netbird.nix flakeContext;
           nginx = import ./modules/vds/cloudflared.nix flakeContext;
           xray = import ./modules/vds/xray.nix flakeContext;
         };

modules/vds/netbird.nix

@@ -0,0 +1,29 @@
+{ inputs, ... }@flakeContext:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  services.netbird.server = {
+    enable = true;
+  };
+
+  networking.firewall = {
+    allowedTCPPorts = [
+      80
+      443
+      33073
+      10000
+      33080
+    ];
+    allowedUDPPorts = [ 3478 ];
+    allowedUDPPortRanges = [
+      {
+        from = 49152;
+        to = 65535;
+      }
+    ];
+  };
+}