Cloonar/nixos
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix gitea

Browse Source
This commit is contained in:
Dominik Polakovics Polakovics
2023-12-03 19:54:46 +01:00
parent 10bb263fb3
commit cac9721b0c
3 changed files with 10 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
hosts/fw.cloonar.com/modules/firewall.nix
View File

@@ -71,6 +71,7 @@
iifname { iifname {
"lan", "lan",
"podman0", "podman0",
"server",
"infrastructure", "infrastructure",
"wg_cloonar", "wg_cloonar",
"smart", "smart",
@@ -79,6 +80,7 @@
iifname { iifname {
"lan", "lan",
"podman0", "podman0",
"server",
"infrastructure", "infrastructure",
"wg_cloonar", "wg_cloonar",
"smart", "smart",
@@ -109,13 +111,14 @@
# lan and vpn to any # lan and vpn to any
# TODO: disable wan when finished # TODO: disable wan when finished
iifname { "wan", "lan", "podman0", "wg_cloonar" } oifname { "lan", "podman0", "infrastructure", "multimedia", "smart", "wrwks", "wg_cloonar", "wg_epicenter", "wg_ghetto_at" } counter accept iifname { "wan", "lan", "server", "podman0", "wg_cloonar" } oifname { "lan", "server", "podman0", "infrastructure", "multimedia", "smart", "wrwks", "wg_cloonar", "wg_epicenter", "wg_ghetto_at" } counter accept
iifname { "infrastructure" } oifname { "podman0" } counter accept iifname { "infrastructure" } oifname { "podman0", "server" } counter accept
# Allow trusted network WAN access # Allow trusted network WAN access
iifname { iifname {
"lan", "lan",
"infrastructure", "infrastructure",
"server",
"podman0", "podman0",
"multimedia", "multimedia",
"smart", "smart",

2
hosts/fw.cloonar.com/modules/gitea.nix
View File

@@ -100,7 +100,7 @@ in
containers.gitea = { containers.gitea = {
autoStart = true; autoStart = true;
privateNetwork = true; privateNetwork = true;
hostBridge = "brserver"; hostBridge = "server";
localAddress = "10.42.97.2/24"; localAddress = "10.42.97.2/24";
bindMounts = { bindMounts = {
"/var/lib/gitea" = { "/var/lib/gitea" = {

8
hosts/fw.cloonar.com/modules/networking.nix
View File

@@ -30,7 +30,7 @@
id = 101; id = 101;
interface = "enp5s0"; interface = "enp5s0";
}; };
server = { vserver = {
id = 97; id = 97;
interface = "enp5s0"; interface = "enp5s0";
}; };
@@ -48,8 +48,8 @@
}; };
}; };
bridges = { bridges = {
brserver = { server = {
interfaces = [ "server" ]; interfaces = [ "vserver" ];
}; };
}; };
@@ -67,7 +67,7 @@
prefixLength = 24; prefixLength = 24;
}]; }];
}; };
brserver = { server = {
ipv4.addresses = [{ ipv4.addresses = [{
address = "10.42.97.1"; address = "10.42.97.1";
prefixLength = 24; prefixLength = 24;