mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

feat(ward): open kanidm port only for sentinel

Browse source
This commit is contained in:
oddlama 2023-06-01 01:33:13 +02:00
parent c1fe238c75
commit df2657bb1c
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
5 changed files with 20 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/sentinel/default.nix
View file

@ -14,6 +14,4 @@
./net.nix
./nginx.nix
];
boot.loader.grub.devices = ["/dev/disk/by-id/${config.repo.secrets.local.disk.main}"];
}

1
hosts/sentinel/fs.nix
View file

@ -39,6 +39,7 @@
};
};
boot.loader.grub.devices = ["/dev/disk/by-id/${config.repo.secrets.local.disk.main}"];
boot.initrd.luks.devices.enc-rpool.allowDiscards = true;
fileSystems."/persist".neededForBoot = true;

1
hosts/sentinel/nginx.nix
View file

@ -49,6 +49,7 @@ in {
locations."/".proxyPass = "https://kanidm";
# Allow using self-signed certs to satisfy kanidm's requirement
# for TLS connections. (This is over wireguard anyway)
# TODO can we get rid of this?
extraConfig = ''
proxy_ssl_verify off;
'';