diff options
| author | Franck Cuny <franck@fcuny.net> | 2025-11-10 19:05:45 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2025-11-10 19:05:45 -0800 |
| commit | 5b47695eb1447f52dc3c4d90440e71ff82c3d7aa (patch) | |
| tree | 7af78281b71c623735ff56da1b6f263010239ea1 | |
| parent | configure cgit (diff) | |
| download | infra-5b47695eb1447f52dc3c4d90440e71ff82c3d7aa.tar.gz | |
configure the reverse proxy for cgit
| -rw-r--r-- | machines/nixos/x86_64-linux/do-rproxy.nix | 9 | ||||
| -rw-r--r-- | machines/nixos/x86_64-linux/rivendell.nix | 1 |
2 files changed, 2 insertions, 8 deletions
diff --git a/machines/nixos/x86_64-linux/do-rproxy.nix b/machines/nixos/x86_64-linux/do-rproxy.nix index dd20df3..fe61be2 100644 --- a/machines/nixos/x86_64-linux/do-rproxy.nix +++ b/machines/nixos/x86_64-linux/do-rproxy.nix @@ -150,14 +150,7 @@ acmeRoot = null; forceSSL = true; locations."/" = { - proxyPass = "http://10.100.0.60:3000"; - }; - locations."/metrics" = { - proxyPass = "http://10.100.0.60:3000/metrics"; - extraConfig = '' - deny all; - access_log off; - ''; + proxyPass = "http://10.100.0.60"; }; }; "go.fcuny.net" = { diff --git a/machines/nixos/x86_64-linux/rivendell.nix b/machines/nixos/x86_64-linux/rivendell.nix index 8e47108..e2f03b4 100644 --- a/machines/nixos/x86_64-linux/rivendell.nix +++ b/machines/nixos/x86_64-linux/rivendell.nix @@ -63,6 +63,7 @@ }; }; + networking.firewall.trustedInterfaces = [ "wg0" ]; networking.firewall.allowedUDPPorts = [ 51871 ]; home-manager = { |