From 564139518b34d951ad328c8cee0da279219c582a Mon Sep 17 00:00:00 2001
From: Don Harper <duck@duckland.org>
Date: Thu, 18 Jun 2026 12:18:08 -0500
Subject: [PATCH] first pass turning headscale on w1

---
 hosts/w1/default.nix  |  4 +++-
 modules/headscale.nix | 23 +++++++++++++++++++++++
 modules/netbird.nix   | 28 ++++++++++++++++++++++++++++
 3 files changed, 54 insertions(+), 1 deletion(-)
 create mode 100644 modules/headscale.nix
 create mode 100644 modules/netbird.nix

diff --git a/hosts/w1/default.nix b/hosts/w1/default.nix
index 9b3c49c..52eb97f 100644
--- a/hosts/w1/default.nix
+++ b/hosts/w1/default.nix
@@ -2,7 +2,9 @@
   imports = [
     ../templates/server.nix
     ./hardware-configuration.nix
-    ./podman.nix
+    ../../modules/headscale.nix
+    # ../../modules/netbird.nix
+    # ./podman.nix
   ];
 
   networking.hostName = "w1";
diff --git a/modules/headscale.nix b/modules/headscale.nix
new file mode 100644
index 0000000..2154b41
--- /dev/null
+++ b/modules/headscale.nix
@@ -0,0 +1,23 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}: with lib; let
+  domain = "head.nb.duckland.net";
+in {
+  services = {
+    headscale = {
+      enable = true;
+      settings = {
+        server_url = "http://head.nb.duckland.net";
+        dns = {
+          base_domain = "nb.duckland.net";
+          nameservers = {
+            global = [ "1.1.1.1" "1.0.0.1" "2606:4700:4700::1111" "2606:4700:4700::1001" ];
+          };
+        };
+      };
+    };
+  };
+}
diff --git a/modules/netbird.nix b/modules/netbird.nix
new file mode 100644
index 0000000..34bf626
--- /dev/null
+++ b/modules/netbird.nix
@@ -0,0 +1,28 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}: {
+  services.netbird.server = {
+    enable = true;
+    domain = "nb.duckland.net";
+    enableNginx = true;
+    dashboard = {
+      enable = false;
+      domain = "nb.duckland.net";
+      enableNginx = true;
+    };
+    management = {
+      enable = true;
+      domain = "nb.duckland.net";
+      enableNginx = true;
+      dnsDomain = "duckland";
+    };
+    signal = {
+      enable = true;
+      domain = "nb.duckland.net";
+      enableNginx = true;
+    };
+  };
+}