feat: add service to start vpn at login

icecreammatt · Feb 4, 2024 · 09c75b0 · 09c75b0
1 parent 7d0f648
commit 09c75b0
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/hosts/asahi/default.nix b/hosts/asahi/default.nix
@@ -73,6 +73,27 @@ in {
           file."bin/pbcopy".source = "${pkgs.wl-clipboard}/bin/wl-copy";
           file."bin/pbpaste".source = "${pkgs.wl-clipboard}/bin/wl-paste";
 
+          # CapabilityBoundingSet=CAP_NET_ADMIN
+          # AmbientCapabilities=CAP_NET_ADMIN
+          # Running this as root is not idea but I cannot get the Set Cap bits to work
+          file.".config/systemd/system/nebula.service".text = ''
+            [Unit]
+            Description=Nebula Service
+            After=network.target
+            StartLimitIntervalSec=0
+
+            [Service]
+            Restart=always
+            Type=simple
+            Restart=always
+            RestartSec=1
+            User=root
+            ExecStart=${pkgs.nebula}/bin/nebula -config /etc/nebula/config.yaml
+
+            [Install]
+            WantedBy = ["multi-user.target"];
+          '';
+
           packages = [
             pkgs.cascadia-code # Fonts
             pkgs.docker