Ittihadyya/adyya-flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updated some comments and added grafana to caddyfile, currently restricted to the IP range of the wireguard network.
Some checks failed
/ Check formatting (push) Failing after 1s
Details

Browse source
This commit is contained in:
Ittihadyya 2024-12-20 15:19:30 +02:00
parent 634b971019
commit b73daed1c9
2 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
networking/firewall.mod.nix
View file

@ -40,9 +40,9 @@
services.fail2ban.enable = true; services.fail2ban.enable = true;
networking.firewall = { networking.firewall = {
interfaces.eth0.allowedTCPPorts = [ interfaces.eth0.allowedTCPPorts = [
80 80 # http
222 # forgejo ssh 222 # forgejo ssh
443 443 # https
64738 # murmur tcp 64738 # murmur tcp
]; ];
interfaces.eth0.allowedUDPPorts = [ interfaces.eth0.allowedUDPPorts = [

7
services/caddy/Caddyfile
View file

@ -49,3 +49,10 @@ https://cache.collective-conciousness.monster {
reverse_proxy 10.24.1.4:5020 reverse_proxy 10.24.1.4:5020
} }
https://grf.collective-conciousness.monster {
encode zstd gzip
@wireguard-network remote_ip 10.24.1.0/24
reverse_proxy @wireguard-network 10.24.1.4:6700
}