netbird-server: drop vestigial reverse-SSH tunnel #72

Merged
k.renner merged 1 commits from netbird-drop-vestigial-tunnel into master 2026-06-27 10:37:34 +00:00
2 changed files with 0 additions and 36 deletions
@@ -16,14 +16,6 @@ netbird_auth_audience: "qrCjbsFeOO32kXOVwF8OrunzettalsMJ5GoOKJAR"
netbird_auth_client_id: "qrCjbsFeOO32kXOVwF8OrunzettalsMJ5GoOKJAR"
netbird_auth_client_secret: "{{ vault_netbird_auth_client_secret }}"
netbird_auth_issuer: "https://auth.renner.uno/application/o/netbird/"
netbird_auth_tunnel_port: 8443
# Homelab ingress for tunnel
netbird_auth_ingress_host: "10.2.45.100"
netbird_auth_ingress_port: 443
# Tunnel SSH key path (on tunnel host)
netbird_tunnel_ssh_key: "/root/.ssh/netbird_tunnel_key"
# TURN server credentials
netbird_turn_secret: "{{ vault_netbird_turn_secret }}"
@@ -1,28 +0,0 @@
[Unit]
Description=NetBird Auth SSH Tunnel (autossh)
Documentation=https://netbird.io
After=network-online.target
Wants=network-online.target
[Service]
Type=simple
Environment="AUTOSSH_GATETIME=0"
Environment="AUTOSSH_POLL=30"
Environment="AUTOSSH_LOGLEVEL=7"
# Reverse tunnel: VPS:{{ netbird_auth_tunnel_port }} -> homelab ingress:{{ netbird_auth_ingress_port }}
# This allows VPS containers to reach auth.renner.uno via localhost:{{ netbird_auth_tunnel_port }}
ExecStart=/usr/bin/autossh -M 0 -N \
-o "ServerAliveInterval=30" \
-o "ServerAliveCountMax=3" \
-o "ExitOnForwardFailure=yes" \
-o "StrictHostKeyChecking=accept-new" \
-i {{ netbird_tunnel_ssh_key }} \
-R {{ netbird_auth_tunnel_port }}:{{ netbird_auth_ingress_host }}:{{ netbird_auth_ingress_port }} \
{{ netbird_server_user }}@{{ netbird_server_host }}
Restart=always
RestartSec=10
[Install]
WantedBy=multi-user.target