123

devices/vds.nix

@@ -9,7 +9,9 @@ let
       ...
     }:
     {
-      imports = with inputs; [
+      imports =
+        with inputs;
+        [
           (modulesPath + "/installer/scan/not-detected.nix")
           (modulesPath + "/profiles/qemu-guest.nix")
 

flake.nix

@@ -123,6 +123,7 @@
         };
         vds = {
           cloudflared = import ./modules/vds/cloudflared.nix flakeContext;
+          netbird = import ./modules/vds/netbird.nix flakeContext;
           nginx = import ./modules/vds/cloudflared.nix flakeContext;
           xray = import ./modules/vds/xray.nix flakeContext;
         };

modules/vds/netbird.nix

@@ -0,0 +1,29 @@
+{ inputs, ... }@flakeContext:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+{
+  services.netbird.server = {
+    enable = true;
+  };
+
+  networking.firewall = {
+    allowedTCPPorts = [
+      80
+      443
+      33073
+      10000
+      33080
+    ];
+    allowedUDPPorts = [ 3478 ];
+    allowedUDPPortRanges = [
+      {
+        from = 49152;
+        to = 65535;
+      }
+    ];
+  };
+}