palo/nixos-config
palo/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update transmission2

Browse source
This commit is contained in:
Ingolf Wagner 2022-09-13 09:49:29 +02:00
parent 14530a926c
commit 6cc5aa9d34
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
1 changed files with 2 additions and 24 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
nixos/configs/robi/transmission2.nix
View file

@ -14,10 +14,6 @@
#└──────────────────────────────────┘ └──────────────────────────────────────┘ #└──────────────────────────────────┘ └──────────────────────────────────────┘
let let
hostInterface = "enp3s0";
hostAddress = "192.168.100.30";
containerAddress = "192.168.100.32";
uiPort = 9091; uiPort = 9091;
############################################# #############################################
@ -71,14 +67,8 @@ in
# container network setup # container network setup
# see also nating on host system. # see also nating on host system.
privateNetwork = true;
hostAddress = hostAddress;
localAddress = containerAddress;
autoStart = true; autoStart = true;
# needed for openvpn
enableTun = true;
config = { config, pkgs, lib, ... }: { config = { config, pkgs, lib, ... }: {
system.stateVersion = "21.05"; system.stateVersion = "21.05";
@ -102,7 +92,7 @@ in
rpc-host-whitelist-enabled = false; rpc-host-whitelist-enabled = false;
rpc-port = uiPort; rpc-port = uiPort;
rpc-enable = true; rpc-enable = true;
rpc-bind-address = "0.0.0.0"; rpc-bind-address = "127.0.0.1";
# "normal" speed limits # "normal" speed limits
speed-limit-down-enabled = false; speed-limit-down-enabled = false;
@ -153,11 +143,6 @@ in
networking.firewall = { networking.firewall = {
allowedTCPPorts = [ 51413 ]; allowedTCPPorts = [ 51413 ];
allowedUDPPorts = [ 51413 ]; allowedUDPPorts = [ 51413 ];
# only allow access via nginx (proxy to localhost)
interfaces.eth0 = {
allowedTCPPorts = [ uiPort ];
allowedUDPPorts = [ uiPort ];
};
}; };
# bind transmission to openvpn # bind transmission to openvpn
@ -173,13 +158,6 @@ in
}; };
}; };
# give containers internet access
networking.nat.enable = true;
networking.nat.internalInterfaces = [ "ve-torrent" ];
networking.nat.externalInterface = hostInterface;
networking.nat.forwardPorts = [
{ destination = "${containerAddress}:51413"; proto = "tcp"; sourcePort = 51413; }
];
networking.firewall = { networking.firewall = {
allowedTCPPorts = [ 51413 ]; allowedTCPPorts = [ 51413 ];
allowedUDPPorts = [ 51413 ]; allowedUDPPorts = [ 51413 ];
@ -200,7 +178,7 @@ in
deny all; deny all;
''; '';
locations."/" = { locations."/" = {
proxyPass = "http://${containerAddress}:${toString uiPort}"; proxyPass = "http://127.0.0.1:${toString uiPort}";
}; };
}; };
}; };