This commit is contained in:
parent
13bfe6f787
commit
bff93529aa
@ -46,6 +46,7 @@
|
|||||||
## Custom Services
|
## Custom Services
|
||||||
custom = {
|
custom = {
|
||||||
locations.autoServe = true;
|
locations.autoServe = true;
|
||||||
|
www.global.enable = true;
|
||||||
services = {
|
services = {
|
||||||
gitea.actions = {
|
gitea.actions = {
|
||||||
enable = true;
|
enable = true;
|
||||||
@ -106,9 +107,12 @@
|
|||||||
eth0 = {
|
eth0 = {
|
||||||
allowedTCPPorts = lib.mkForce [
|
allowedTCPPorts = lib.mkForce [
|
||||||
53 # DNS
|
53 # DNS
|
||||||
|
80 # HTTP 1-2
|
||||||
|
443 # HTTPS 1-2
|
||||||
];
|
];
|
||||||
allowedUDPPorts = lib.mkForce [
|
allowedUDPPorts = lib.mkForce [
|
||||||
53 # DNS
|
53 # DNS
|
||||||
|
443 # HTTP 3
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
@ -22,7 +22,6 @@
|
|||||||
## Custom Services
|
## Custom Services
|
||||||
custom = {
|
custom = {
|
||||||
locations.autoServe = true;
|
locations.autoServe = true;
|
||||||
www.global.enable = true;
|
|
||||||
services = {
|
services = {
|
||||||
gitea.actions = {
|
gitea.actions = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
@ -65,8 +65,8 @@ in
|
|||||||
http = {
|
http = {
|
||||||
use_x_forwarded_for = true;
|
use_x_forwarded_for = true;
|
||||||
trusted_proxies = with config.custom.dns.authoritative; [
|
trusted_proxies = with config.custom.dns.authoritative; [
|
||||||
ipv4.uk.co.hillion.ts.cx.jorah
|
ipv4.uk.co.hillion.ts.cx.boron
|
||||||
ipv6.uk.co.hillion.ts.cx.jorah
|
ipv6.uk.co.hillion.ts.cx.boron
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
|
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
@ -123,9 +123,9 @@ in
|
|||||||
"homeassistant/secrets.yaml.age".publicKeys = jake_users ++ [ ts.home.microserver ];
|
"homeassistant/secrets.yaml.age".publicKeys = jake_users ++ [ ts.home.microserver ];
|
||||||
|
|
||||||
# Web certificates
|
# Web certificates
|
||||||
"certs/hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
|
"certs/hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
|
||||||
"certs/blog.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
|
"certs/blog.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
|
||||||
"certs/gitea.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
|
"certs/gitea.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
|
||||||
"certs/homeassistant.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
|
"certs/homeassistant.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
|
||||||
"certs/links.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.jorah ];
|
"certs/links.hillion.co.uk.pem.age".publicKeys = jake_users ++ [ ts.cx.boron ];
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user