Обновить docker-compose.yml

config.yaml

@@ -1,6 +1,6 @@
 server:
   listenAddress: ":80"
-  exposedAddress: "https://brd.greact.online:443"   # домен, через который ходит UI и клиенты
+  exposedAddress: "birdy.greact.online:50051"  # без схемы
   stunPorts:
     - 3478
   logLevel: "info"
@@ -8,16 +8,24 @@ server:
   authSecret: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="
   dataDir: "/var/lib/netbird"
 
-  auth:
+  auth:                                          # вложено под server
-    issuer: "https://brd.greact.online/oauth2"
+    issuer: "https://birdy.greact.online/oauth2"
     localAuthDisabled: false
     signKeyRefreshEnabled: true
     dashboardRedirectURIs:
-      - "https://brd.greact.online/nb-auth"
+      - "https://birdy.greact.online/nb-auth"
-      - "https://brd.greact.online/nb-silent-auth"
+      - "https://birdy.greact.online/nb-silent-auth"
     cliRedirectURIs:
       - "http://localhost:53000/"
 
-  store:
+  reverseProxy:
+    trustedHTTPProxies:
+      - "172.16.0.0/12"  # Docker-подсеть (покрывает NPM-контейнер в сети proxy)
+
+  store:                                         # вложено под server
     engine: "sqlite"
     encryptionKey: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="
+
+relay:
+  exposedAddress: "rel://birdy.greact.online:33080"  # отдельный адрес для relay
+  secret: "0xO0NE2nsyAv3QWM6lYfYMKZ+TJ4BG4N93kpbCWYISg="

dashboard.env

@@ -1,14 +1,14 @@
-NETBIRD_MGMT_API_ENDPOINT=https://brd.greact.online
+NETBIRD_MGMT_API_ENDPOINT=https://birdy.greact.online
-NETBIRD_MGMT_GRPC_API_ENDPOINT=https://brd.greact.online
+NETBIRD_MGMT_GRPC_API_ENDPOINT=grpc://birdy.greact.online:50051
 
 AUTH_AUDIENCE=netbird-dashboard
 AUTH_CLIENT_ID=netbird-dashboard
 AUTH_CLIENT_SECRET=
-AUTH_AUTHORITY=https://brd.greact.online/oauth2
+AUTH_AUTHORITY=https://birdy.greact.online/oauth2
 USE_AUTH0=false
 AUTH_SUPPORTED_SCOPES=openid profile email groups
 AUTH_REDIRECT_URI=/nb-auth
 AUTH_SILENT_REDIRECT_URI=/nb-silent-auth
-LETSENCRYPT_DOMAIN=
+LETSENCRYPT_DOMAIN=none
-LETSENCRYPT_EMAIL=
+LETSENCRYPT_EMAIL=example@local
-NGINX_SSL_PORT=
+NGINX_SSL_PORT=443

docker-compose.yml

@@ -6,6 +6,10 @@ services:
     container_name: netbird-server
     expose:
       - "80"              # Management API + OAuth2 + Signal -- внутрь proxy-сети
+    ports:
+      - "50051:80"          # management gRPC
+      - "33080:33080"       # relay (TCP)
+      - "3478:3478/udp"     # STUN
     volumes:
       - netbird_data:/var/lib/netbird   # именованный volume (не bind-mount)
     networks: