About Nebula Commander

Nebula Commander is a self-hosted control plane for Nebula overlay networks.

What it does

• Networks & nodes — Create networks, manage nodes, IP allocation, and certificates
• Web UI — React dashboard with OIDC (e.g. Keycloak) or dev token authentication
• Device client (ncclient) — pip install nebula-commander for enroll and run; see ncclient documentation

Status

What’s implemented already

• Network Creation
• Certificate Generation
• config.yaml Generation
• Basic Firewall Group Rules
• Node Management
• Audit Logging
• Basic Invitation System
• User Management System

What’s coming in v0.2.0

• Stabilize client
• Client UI via Web Interface
• Magic DNS Implementation
• Exit Nodes

Installation options

• Development — Python backend + React frontend; see Development: Setup
• NixOS — Import the module and enable services.nebula-commander; see Server Installation: NixOS
• Docker — See Server Installation: Docker

Configuration

Environment variables use the NEBULA_COMMANDER_ prefix. See Server Configuration and Environment for key options such as DATABASE_URL, CERT_STORE_PATH, JWT_SECRET_KEY (or JWT_SECRET_FILE), OIDC_ISSUER_URL, OIDC_CLIENT_ID, and DEBUG.

License

Backend and frontend: MIT. Client (ncclient): GPLv3 or later. See Getting started: License for details.