Add Lena to Nebula mesh with SSH over overlay #73

New issue

Closed

opened 2026-07-19 16:51:13 +01:00 by nimmo · 0 comments

nimmo commented

2026-07-19 16:51:13 +01:00

Owner

Goal

Get Lena (Claire's Lenovo Ideapad 2-in-1) onto the Nebula mesh network and enable SSH access at nimmo@lena.mesh (overlay IP: 10.10.0.21).

Changes (branch: `lena-nebula`)

Configuration is ready in MR !73 — these are the changes to apply:

Import ../../modules/networking/nebula.nix in hosts/lena/default.nix
Add nixosConfig.nebula = { enable = true; overlayIp = "10.10.0.21"; }
Enable SSH with key-only auth and allow port 22 on nebula.mesh firewall interface
Add lena = "10.10.0.21" to the hostMap in modules/networking/nebula.nix

Prerequisites

Before deploying on lena:

Nebula cert and key — verify that /srv/.../sebby-peacock/nebula/certs/lena.crt exists (confirmed) and the corresponding private key is present in SOPS (secrets.yaml) under nebula/lena-key. If it's not already there, extract it from the original cert generation or regenerate.

Deployment steps on lena

Pull the branch:

git fetch origin lena-nebula && git checkout lena-nebula

Validate build locally:
```
nix flake check .#lena
```

Deploy:

sudo nixos-rebuild switch --flake .#lena

Verify nebula connects (check systemctl status nebula@mesh, confirm 10.10.0.21 gets an address with ip addr show neblena mesh).
Test SSH: from another mesh node (ssh nimmo@lena.mesh).

Post-deploy

Verify /etc/hosts on lena resolves other mesh hosts correctly (vega, electra, lyra, etc.)
Verify other mesh nodes can resolve lena.mesh
Once confirmed working, merge the MR and close this issue

## Goal Get Lena (Claire's Lenovo Ideapad 2-in-1) onto the Nebula mesh network and enable SSH access at `nimmo@lena.mesh` (overlay IP: `10.10.0.21`). ## Changes (branch: `lena-nebula`) Configuration is ready in MR !73 — these are the changes to apply: - Import `../../modules/networking/nebula.nix` in `hosts/lena/default.nix` - Add `nixosConfig.nebula = { enable = true; overlayIp = "10.10.0.21"; }` - Enable SSH with key-only auth and allow port 22 on `nebula.mesh` firewall interface - Add `lena = "10.10.0.21"` to the hostMap in `modules/networking/nebula.nix` ## Prerequisites Before deploying on lena: 1. **Nebula cert and key** — verify that `/srv/.../sebby-peacock/nebula/certs/lena.crt` exists (confirmed) and the corresponding private key is present in SOPS (`secrets.yaml`) under `nebula/lena-key`. If it's not already there, extract it from the original cert generation or regenerate. ## Deployment steps on lena 1. Pull the branch: ```bash git fetch origin lena-nebula && git checkout lena-nebula ``` 2. Validate build locally: ```bash nix flake check .#lena ``` 3. Deploy: ```bash sudo nixos-rebuild switch --flake .#lena ``` 4. Verify nebula connects (check `systemctl status nebula@mesh`, confirm 10.10.0.21 gets an address with `ip addr show neblena mesh`). 5. Test SSH: from another mesh node (`ssh nimmo@lena.mesh`). ## Post-deploy - Verify `/etc/hosts` on lena resolves other mesh hosts correctly (vega, electra, lyra, etc.) - Verify other mesh nodes can resolve `lena.mesh` - Once confirmed working, merge the MR and close this issue

nimmo added this to the Nebula Mesh Network milestone

2026-07-19 16:51:13 +01:00

nimmo added the

project:nebula-mesh-network

host:fleet

labels

2026-07-19 16:53:20 +01:00

nimmo referenced this issue from a pull request that will close it,

2026-07-19 17:47:26 +01:00

feat(lena): Add Nebula mesh and SSH over overlay #75

nimmo added reference lena-nebula

2026-07-19 17:51:31 +01:00