palo/nixos-config
palo/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

🔧 enable service access via zerotier

Browse source
This commit is contained in:
Ingolf Wagner 2025-03-25 17:25:36 +01:00
parent b5555ac4b4
commit 439912b50b
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
2 changed files with 8 additions and 1 deletions

2
machines/chungus/hass.nix
View file

@ -2,6 +2,7 @@
config, config,
lib, lib,
pkgs, pkgs,
zerotierInterface,
... ...
}: }:
{ {
@ -17,5 +18,6 @@
networking.firewall.interfaces.wg0.allowedTCPPorts = [ 8123 ]; networking.firewall.interfaces.wg0.allowedTCPPorts = [ 8123 ];
networking.firewall.interfaces.wg0.allowedUDPPorts = [ 8123 ]; networking.firewall.interfaces.wg0.allowedUDPPorts = [ 8123 ];
networking.firewall.interfaces.${zerotierInterface}.allowedTCPPorts = [ 8123 ];
} }

7
machines/chungus/service-paperless.nix
View file

@ -2,13 +2,15 @@
config, config,
pkgs, pkgs,
lib, lib,
zerotierInterface,
... ...
}: }:
{ {
services.paperless = { services.paperless = {
enable = true; enable = true;
address = "0.0.0.0"; address = "[::]";
port = 28981;
package = pkgs.paperless-ngx; package = pkgs.paperless-ngx;
settings = { settings = {
PAPERLESS_OCR_LANGUAGE = "deu+eng"; PAPERLESS_OCR_LANGUAGE = "deu+eng";
@ -35,6 +37,9 @@
}; };
networking.firewall.interfaces.wg0.allowedTCPPorts = [ config.services.paperless.port ]; networking.firewall.interfaces.wg0.allowedTCPPorts = [ config.services.paperless.port ];
networking.firewall.interfaces.${zerotierInterface}.allowedTCPPorts = [
config.services.paperless.port
];
services.nginx.virtualHosts."paperless.${config.networking.hostName}.private" = { services.nginx.virtualHosts."paperless.${config.networking.hostName}.private" = {
serverAliases = [ "paperless.ingolf-wagner.de" ]; serverAliases = [ "paperless.ingolf-wagner.de" ];