443

config.yaml

@@ -1,6 +1,6 @@
 server:
   listenAddress: ":80"
-  exposedAddress: "https://birdy.greact.online:443"
+  exposedAddress: "https://brd.greact.online:443"   # домен, через который ходит UI и клиенты
   stunPorts:
     - 3478
   logLevel: "info"
@@ -8,20 +8,16 @@ server:
   authSecret: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="
   dataDir: "/var/lib/netbird"
 
-  auth:                                          # ← вложено под server
+  auth:
-    issuer: "https://birdy.greact.online/oauth2"
+    issuer: "https://brd.greact.online/oauth2"
     localAuthDisabled: false
     signKeyRefreshEnabled: true
     dashboardRedirectURIs:
-      - "https://birdy.greact.online/nb-auth"
+      - "https://brd.greact.online/nb-auth"
-      - "https://birdy.greact.online/nb-silent-auth"
+      - "https://brd.greact.online/nb-silent-auth"
     cliRedirectURIs:
       - "http://localhost:53000/"
 
-  reverseProxy:
+  store:
-    trustedHTTPProxies:
-      - "172.16.0.0/12"  # Docker-подсеть (покрывает NPM-контейнер в сети proxy)
-
-  store:                                         # ← вложено под server
     engine: "sqlite"
     encryptionKey: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="

dashboard.env

@@ -1,14 +1,14 @@
-NETBIRD_MGMT_API_ENDPOINT=https://birdy.greact.online
+NETBIRD_MGMT_API_ENDPOINT=https://brd.greact.online
-NETBIRD_MGMT_GRPC_API_ENDPOINT=https://birdy.greact.online
+NETBIRD_MGMT_GRPC_API_ENDPOINT=https://brd.greact.online
 
 AUTH_AUDIENCE=netbird-dashboard
 AUTH_CLIENT_ID=netbird-dashboard
 AUTH_CLIENT_SECRET=
-AUTH_AUTHORITY=https://birdy.greact.online/oauth2
+AUTH_AUTHORITY=https://brd.greact.online/oauth2
 USE_AUTH0=false
 AUTH_SUPPORTED_SCOPES=openid profile email groups
 AUTH_REDIRECT_URI=/nb-auth
 AUTH_SILENT_REDIRECT_URI=/nb-silent-auth
-LETSENCRYPT_DOMAIN=none
+LETSENCRYPT_DOMAIN=
-LETSENCRYPT_EMAIL=example@local
+LETSENCRYPT_EMAIL=
-NGINX_SSL_PORT=443
+NGINX_SSL_PORT=

docker-compose.yml

@@ -1,5 +1,3 @@
-version: "3.8"
-
 services:
   netbird-server:
     build:
@@ -7,10 +5,7 @@ services:
       dockerfile: Dockerfile.netbird-server
     container_name: netbird-server
     expose:
-      - "80"              # Management API + OAuth2 + Signal → внутрь proxy-сети
+      - "80"              # Management API + OAuth2 + Signal -- внутрь proxy-сети
-    ports:
-      - "3478:3478/udp"     # STUN, как было
-      - "8444:80"           # ← новый публичный TCP‑порт для management (пример)
     volumes:
       - netbird_data:/var/lib/netbird   # именованный volume (не bind-mount)
     networks: