mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

fix: immich internet access via vlan

Browse source
This commit is contained in:
oddlama 2025-01-25 20:24:30 +01:00
parent e7971ccf6c
commit 0ff0828ca9
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hosts/sire/guests/immich.nix
View file

@ -23,7 +23,6 @@ let
crf = 23;
gopSize = 0;
maxBitrate = "0";
npl = 0;
preset = "ultrafast";
refs = 0;
targetAudioCodec = "aac";
@ -178,7 +177,7 @@ in
rules = [
"iifname proxy-sentinel ip saddr ${sentinelCfg.wireguard.proxy-sentinel.ipv4} tcp dport 2283 accept"
"iifname proxy-home ip saddr ${wardWebProxyCfg.wireguard.proxy-home.ipv4} tcp dport 2283 accept"
"iifname podman1 oifname lan accept"
"iifname podman1 oifname vlan-services accept"
];
};

5
hosts/ward/guests/kanidm.nix
View file

@ -117,7 +117,10 @@ in
groups."immich.access" = { };
systems.oauth2.immich = {
displayName = "Immich";
originUrl = "https://${globals.services.immich.domain}/auth/login";
originUrl = [
"https://${globals.services.immich.domain}/auth/login"
"https://${globals.services.immich.domain}/api/oauth/mobile-redirect"
];
originLanding = "https://${globals.services.immich.domain}/";
basicSecretFile = config.age.secrets.kanidm-oauth2-immich.path;
preferShortUsername = true;