From 5b47695eb1447f52dc3c4d90440e71ff82c3d7aa Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Mon, 10 Nov 2025 19:05:45 -0800
Subject: configure the reverse proxy for cgit

---
 machines/nixos/x86_64-linux/do-rproxy.nix | 9 +--------
 machines/nixos/x86_64-linux/rivendell.nix | 1 +
 2 files changed, 2 insertions(+), 8 deletions(-)

(limited to 'machines/nixos/x86_64-linux')

diff --git a/machines/nixos/x86_64-linux/do-rproxy.nix b/machines/nixos/x86_64-linux/do-rproxy.nix
index dd20df3..fe61be2 100644
--- a/machines/nixos/x86_64-linux/do-rproxy.nix
+++ b/machines/nixos/x86_64-linux/do-rproxy.nix
@@ -150,14 +150,7 @@
           acmeRoot = null;
           forceSSL = true;
           locations."/" = {
-            proxyPass = "http://10.100.0.60:3000";
-          };
-          locations."/metrics" = {
-            proxyPass = "http://10.100.0.60:3000/metrics";
-            extraConfig = ''
-              deny all;
-              access_log off;
-            '';
+            proxyPass = "http://10.100.0.60";
           };
         };
         "go.fcuny.net" = {
diff --git a/machines/nixos/x86_64-linux/rivendell.nix b/machines/nixos/x86_64-linux/rivendell.nix
index 8e47108..e2f03b4 100644
--- a/machines/nixos/x86_64-linux/rivendell.nix
+++ b/machines/nixos/x86_64-linux/rivendell.nix
@@ -63,6 +63,7 @@
     };
   };
 
+  networking.firewall.trustedInterfaces = [ "wg0" ];
   networking.firewall.allowedUDPPorts = [ 51871 ];
 
   home-manager = {
-- 
cgit v1.2.3