nolan/nixos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Don't automatically open firewall for Caddy.

Browse Source
This commit is contained in:
Nolan Darilek 2024-12-23 11:30:37 -06:00
parent dab0af910b
commit 857e7b6a07
2 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
hosts/hub/default.nix
View File

@ -109,6 +109,11 @@
};
};
networking.firewall.allowedTCPPorts = [
80
443
];
services.caddy.virtualHosts."users.thewordnerd.info".extraConfig =
''reverse_proxy localhost:17170'';

4
roles/caddy.nix
View File

@ -6,10 +6,6 @@
package = pkgs.callPackage ../pkgs/caddy.nix { };
email = "nolan@thewordnerd.info";
};
networking.firewall.allowedTCPPorts = [
80
443
];
age.secrets.tsAuthKey = {
file = ../secrets/ts_auth_key.age;
owner = config.services.caddy.user;