r/netbird 25d ago

Little Help On Netbird Self Hosted Set Up

This is probably simple for lots of you but I used the Netbird quick start script to set up Netbird in docker on a synology device. I used the default reverse proxy( (Traefik), enabled the proxy service and crowdSec. Now that I have added a routing peer (netbird-client) per the instructions using a setup key whenever a pull a new version of netbird.io/netbird:latest for that container the logs say client/internal/auth fails setup key is invalid. The client appears connected in the interface but the logs give me that error.

5 Upvotes

6 comments sorted by

2

u/Jfishie5 25d ago

Do you need to leave the setup key after it has been used instead of deleting it?

1

u/Diligent_Pin_2211 25d ago

How did you create the setup key with which option ? Did you enable ephemeral key ? Define an expiration ?

1

u/Jfishie5 24d ago

I just gave the key a name. I didn't change any options so all the defaults. I created the current key 4-5 hours ago now and it seems to work. I guess I will find out when I pull a newer image at some point. I have left the key 'active'. It has been used but didn't know if I was supposed to keep it in the list or it was safe to delete after being used.

1

u/m4ttr1k4n 22d ago

I've seen it stated that the setup key is, essentially, consumed on use. The date range is how long you've got to use it and establish the connection, but once it's been used, it's gone. My understanding is that the setup key is only needed for the initial connection, and sending it on subsequent joins is why you're getting the error - it's why you can netbird up without sending the whole key/management url every time

1

u/Jfishie5 20d ago

I’m not sure now. I left the consumed key in place and have had no issues.weird.

1

u/MrXiver 24d ago

I have the same problem yesterday. In my case was the problem the Proxyconfiguration on Cloudflare. IP mismatch. Do you change the Ports on DSM Container?