NeXuS Scripts¶
Shell scripts, utilities, and automation tools for the NeXuS node stack.
All scripts follow the NeXuS file protocol: self-identifying names, portable, no hardcoded paths. Environment variables carry all configuration.
NCM — Network Connection Manager¶
Scripts for the nexus-connection-manager — the watchbind TUI and web dashboard for managing interfaces, VPN, and darknet services.
| Script | Purpose |
|---|---|
nexus-ncm-certs.sh |
mTLS client certificate manager — issue, revoke, and install browser certs for the NCM web dashboard |
Using These Scripts¶
Scripts live in ~/scripts/ on any NeXuS node. The ncm/ subdirectory holds scripts specific to the connection manager.
# Run directly
~/scripts/ncm/nexus-ncm-certs.sh help
# Or add ~/scripts to PATH in your shell config
export PATH="$HOME/scripts:$HOME/scripts/ncm:$PATH"
All scripts respect these environment variables when set:
| Variable | Default | Purpose |
|---|---|---|
NCM_CA_DIR |
~/vault/ncm-ca |
mTLS certificate authority storage |
NCM_VPN_DIR |
~/vault |
WireGuard and OpenVPN config files |
NEXUS_WEB_SERVER |
~/Projects/nexus-web-server/nexus_web_server.py |
Web server path |
NEXUS_PROXY_SCRIPT |
~/scripts/nexus-api-proxy.sh |
Proxy manager script |