add nebula

configuration.nix

@@ -5,6 +5,7 @@
     ./heartles-xyz-proxy.nix
     ./ogdo.nix
     ./postfix.nix
+    ./nebula.nix
   ];
 
   nix.settings = {

flake.lock

@@ -2,11 +2,11 @@
   "nodes": {
     "nixpkgs": {
       "locked": {
-        "lastModified": 1722519197,
+        "lastModified": 1722869614,
-        "narHash": "sha256-VEdJmVU2eLFtLqCjTYJd1J7+Go8idAcZoT11IewFiRg=",
+        "narHash": "sha256-7ojM1KSk3mzutD7SkrdSflHXEujPvW1u7QuqWoTLXQU=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "05405724efa137a0b899cce5ab4dde463b4fd30b",
+        "rev": "883180e6550c1723395a3a342f830bfc5c371f6b",
         "type": "github"
       },
       "original": {
@@ -24,11 +24,11 @@
     },
     "unstable": {
       "locked": {
-        "lastModified": 1722421184,
+        "lastModified": 1722813957,
-        "narHash": "sha256-/DJBI6trCeVnasdjUo9pbnodCLZcFqnVZiLUfqLH4jA=",
+        "narHash": "sha256-IAoYyYnED7P8zrBFMnmp7ydaJfwTnwcnqxUElC1I26Y=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "9f918d616c5321ad374ae6cb5ea89c9e04bf3e58",
+        "rev": "cb9a96f23c491c081b38eab96d22fa958043c9fa",
         "type": "github"
       },
       "original": {

nebula.nix

@@ -0,0 +1,12 @@
+{ pkgs, lib, ... }:
+
+{
+  environment.systemPackages = [ pkgs.nebula ];
+  services.nebula.networks.home = {
+    enable = true;
+    isLighthouse = true;
+    cert = "/etc/nebula/node.crt";
+    key = "/etc/nebula/node.key";
+    ca = "/etc/nebula/ca.crt";
+  };
+}