1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00

fix: immich internet access via vlan

This commit is contained in:
oddlama 2025-01-25 20:24:30 +01:00
parent e7971ccf6c
commit 0ff0828ca9
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 5 additions and 3 deletions

View file

@ -23,7 +23,6 @@ let
crf = 23; crf = 23;
gopSize = 0; gopSize = 0;
maxBitrate = "0"; maxBitrate = "0";
npl = 0;
preset = "ultrafast"; preset = "ultrafast";
refs = 0; refs = 0;
targetAudioCodec = "aac"; targetAudioCodec = "aac";
@ -178,7 +177,7 @@ in
rules = [ rules = [
"iifname proxy-sentinel ip saddr ${sentinelCfg.wireguard.proxy-sentinel.ipv4} tcp dport 2283 accept" "iifname proxy-sentinel ip saddr ${sentinelCfg.wireguard.proxy-sentinel.ipv4} tcp dport 2283 accept"
"iifname proxy-home ip saddr ${wardWebProxyCfg.wireguard.proxy-home.ipv4} tcp dport 2283 accept" "iifname proxy-home ip saddr ${wardWebProxyCfg.wireguard.proxy-home.ipv4} tcp dport 2283 accept"
"iifname podman1 oifname lan accept" "iifname podman1 oifname vlan-services accept"
]; ];
}; };

View file

@ -117,7 +117,10 @@ in
groups."immich.access" = { }; groups."immich.access" = { };
systems.oauth2.immich = { systems.oauth2.immich = {
displayName = "Immich"; displayName = "Immich";
originUrl = "https://${globals.services.immich.domain}/auth/login"; originUrl = [
"https://${globals.services.immich.domain}/auth/login"
"https://${globals.services.immich.domain}/api/oauth/mobile-redirect"
];
originLanding = "https://${globals.services.immich.domain}/"; originLanding = "https://${globals.services.immich.domain}/";
basicSecretFile = config.age.secrets.kanidm-oauth2-immich.path; basicSecretFile = config.age.secrets.kanidm-oauth2-immich.path;
preferShortUsername = true; preferShortUsername = true;