albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Test

Browse source
This commit is contained in:
iFargle 2023-10-08 17:34:07 +09:00
parent 07a9e8b827
commit 6000a4f1ce
3 changed files with 16 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
nixos/hosts/nixos-rpi4-03/temp.nix
View file

@ -1,6 +1,6 @@
{pkgs, lib, config, ...}: { {pkgs, lib, config, ...}: {
# networking.firewall.interfaces.wireguard0.allowedTCPPorts = [ 80 443 ]; networking.firewall.interfaces.wireguard0.allowedTCPPorts = [ 80 443 ];
networking.firewall.allowedTCPPorts = [ 80 443 ]; # networking.firewall.allowedTCPPorts = [ 80 443 ];
services.nginx = { services.nginx = {
enable = true; enable = true;

13
nixos/hosts/osaka-vultr-01/default.nix
View file

@ -20,4 +20,17 @@
networking.hostName = "osaka-vultr-01"; networking.hostName = "osaka-vultr-01";
networking.firewall.allowedTCPPorts = [ 22 ]; networking.firewall.allowedTCPPorts = [ 22 ];
# Generic Tailscale configs are in /nixos/common/services/tailscale.nix
# Set up the secrets file:
sops.secrets."tailscale_keys/osaka-vultr-01" = {
owner = "root";
sopsFile = ../../../secrets/tailscale.yaml;
restartUnits = [
"tailscaled.service"
"tailscaled-autoconnect.service"
];
};
services.tailscale.authKeyFile = "/run/secrets/tailscale_keys/osaka-vultr-01";
services.tailscale.extraUpFlags = [ "--advertise-exit-node" ];
} }

2
nixos/hosts/osaka-vultr-01/xinetd.nix
View file

@ -1,5 +1,5 @@
{ config, lib, pkgs, ... }: { { config, lib, pkgs, ... }: {
networking.firewall.interfaces.eno3.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
80 80
443 443
]; ];