Обновить docker-compose.yml

config.yaml

@@ -1,6 +1,6 @@
 server:
   listenAddress: ":80"
-  exposedAddress: "https://birdy.greact.online"   # домен, через который ходит UI и клиенты
+  exposedAddress: "birdy.greact.online:50051"  # без схемы
   stunPorts:
     - 3478
   logLevel: "info"
@@ -8,7 +8,7 @@ server:
   authSecret: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="
   dataDir: "/var/lib/netbird"
 
-  auth:
+  auth:                                          # вложено под server
     issuer: "https://birdy.greact.online/oauth2"
     localAuthDisabled: false
     signKeyRefreshEnabled: true
@@ -18,7 +18,14 @@ server:
     cliRedirectURIs:
       - "http://localhost:53000/"
 
-  store:
+  reverseProxy:
+    trustedHTTPProxies:
+      - "172.16.0.0/12"  # Docker-подсеть (покрывает NPM-контейнер в сети proxy)
+
+  store:                                         # вложено под server
     engine: "sqlite"
     encryptionKey: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="
-    
+
+relay:
+  exposedAddress: "rel://birdy.greact.online:33080"  # отдельный адрес для relay
+  secret: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="

dashboard.env

@@ -1,14 +1,14 @@
 NETBIRD_MGMT_API_ENDPOINT=https://birdy.greact.online
-NETBIRD_MGMT_GRPC_API_ENDPOINT=https://birdy.greact.online
+NETBIRD_MGMT_GRPC_API_ENDPOINT=grpc://birdy.greact.online:50051
 
 AUTH_AUDIENCE=netbird-dashboard
 AUTH_CLIENT_ID=netbird-dashboard
-AUTH_CLIENT_SECRET=0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg=
+AUTH_CLIENT_SECRET=
 AUTH_AUTHORITY=https://birdy.greact.online/oauth2
 USE_AUTH0=false
 AUTH_SUPPORTED_SCOPES=openid profile email groups
 AUTH_REDIRECT_URI=/nb-auth
 AUTH_SILENT_REDIRECT_URI=/nb-silent-auth
-LETSENCRYPT_DOMAIN=birdy.greact.online
+LETSENCRYPT_DOMAIN=none
-LETSENCRYPT_EMAIL=cap7goo@gmail.com
+LETSENCRYPT_EMAIL=example@local
-NGINX_SSL_PORT=443
+NGINX_SSL_PORT=443