Compare commits

...

8 Commits

3 changed files with 12 additions and 9 deletions

View File

@@ -1,6 +1,6 @@
server: server:
listenAddress: ":80" listenAddress: ":80"
exposedAddress: "https://birdy.greact.online:443" exposedAddress: "birdy.greact.online:50051" # без схемы
stunPorts: stunPorts:
- 3478 - 3478
logLevel: "info" logLevel: "info"
@@ -8,7 +8,7 @@ server:
authSecret: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg=" authSecret: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="
dataDir: "/var/lib/netbird" dataDir: "/var/lib/netbird"
auth: # вложено под server auth: # вложено под server
issuer: "https://birdy.greact.online/oauth2" issuer: "https://birdy.greact.online/oauth2"
localAuthDisabled: false localAuthDisabled: false
signKeyRefreshEnabled: true signKeyRefreshEnabled: true
@@ -22,6 +22,10 @@ server:
trustedHTTPProxies: trustedHTTPProxies:
- "172.16.0.0/12" # Docker-подсеть (покрывает NPM-контейнер в сети proxy) - "172.16.0.0/12" # Docker-подсеть (покрывает NPM-контейнер в сети proxy)
store: # вложено под server store: # вложено под server
engine: "sqlite" engine: "sqlite"
encryptionKey: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg=" encryptionKey: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="
relay:
exposedAddress: "rel://birdy.greact.online:33080" # отдельный адрес для relay
secret: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="

View File

@@ -1,5 +1,5 @@
NETBIRD_MGMT_API_ENDPOINT=https://birdy.greact.online NETBIRD_MGMT_API_ENDPOINT=https://birdy.greact.online
NETBIRD_MGMT_GRPC_API_ENDPOINT=https://birdy.greact.online NETBIRD_MGMT_GRPC_API_ENDPOINT=grpc://birdy.greact.online:50051
AUTH_AUDIENCE=netbird-dashboard AUTH_AUDIENCE=netbird-dashboard
AUTH_CLIENT_ID=netbird-dashboard AUTH_CLIENT_ID=netbird-dashboard

View File

@@ -1,5 +1,3 @@
version: "3.8"
services: services:
netbird-server: netbird-server:
build: build:
@@ -7,10 +5,11 @@ services:
dockerfile: Dockerfile.netbird-server dockerfile: Dockerfile.netbird-server
container_name: netbird-server container_name: netbird-server
expose: expose:
- "80" # Management API + OAuth2 + Signal внутрь proxy-сети - "80" # Management API + OAuth2 + Signal -- внутрь proxy-сети
ports: ports:
- "3478:3478/udp" # STUN, как было - "50051:80" # management gRPC
- "8444:80" # ← новый публичный TCPпорт для management (пример) - "33080:33080" # relay (TCP)
- "3478:3478/udp" # STUN
volumes: volumes:
- netbird_data:/var/lib/netbird # именованный volume (не bind-mount) - netbird_data:/var/lib/netbird # именованный volume (не bind-mount)
networks: networks: