mirror of
https://github.com/oddlama/nix-config.git
synced 2025-10-11 07:10:39 +02:00
fix: enable port forwarding on sentinel
This commit is contained in:
parent
7f8c5689e0
commit
4a34c84995
2 changed files with 3 additions and 1 deletions
|
@ -2,6 +2,9 @@
|
||||||
networking.hostId = config.repo.secrets.local.networking.hostId;
|
networking.hostId = config.repo.secrets.local.networking.hostId;
|
||||||
networking.domain = config.repo.secrets.local.personalDomain;
|
networking.domain = config.repo.secrets.local.personalDomain;
|
||||||
|
|
||||||
|
# Forwarding required for forgejo 9922->22
|
||||||
|
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
|
||||||
|
|
||||||
boot.initrd.systemd.network = {
|
boot.initrd.systemd.network = {
|
||||||
enable = true;
|
enable = true;
|
||||||
networks = {inherit (config.systemd.network.networks) "10-wan";};
|
networks = {inherit (config.systemd.network.networks) "10-wan";};
|
||||||
|
|
|
@ -9,7 +9,6 @@
|
||||||
# XXX: other domain on other proxy?
|
# XXX: other domain on other proxy?
|
||||||
forgejoDomain = "git.${sentinelCfg.repo.secrets.local.personalDomain}";
|
forgejoDomain = "git.${sentinelCfg.repo.secrets.local.personalDomain}";
|
||||||
in {
|
in {
|
||||||
# TODO forward ssh port
|
|
||||||
meta.wireguard-proxy.sentinel.allowedTCPPorts = [
|
meta.wireguard-proxy.sentinel.allowedTCPPorts = [
|
||||||
config.services.gitea.settings.server.HTTP_PORT
|
config.services.gitea.settings.server.HTTP_PORT
|
||||||
];
|
];
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue