paperless accessible via wireguard

2024-03-06 13:22:22 +01:00 · 2024-03-06 13:22:22 +01:00 · 7e05a9438b
commit 7e05a9438b
parent 18a10f569f
1 changed files with 4 additions and 0 deletions
--- a/nixos/machines/chungus/paperless.nix
+++ b/nixos/machines/chungus/paperless.nix
@ -1,7 +1,11 @@
 { config, ... }: {
+
  services.paperless = {
    enable = true;
  };
+
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ config.services.paperless.port ];
+
  services.nginx.virtualHosts."paperless.${config.networking.hostName}.private" = {
    extraConfig = ''
      allow ${config.tinc.private.subnet};