palo/nixos-config
palo/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions1

🔧 make paperless accessible via zerotier

Browse source
This commit is contained in:
Ingolf Wagner 2025-05-01 00:53:22 +02:00
parent eeed7220c1
commit f58d688ad9
No known key found for this signature in database
GPG key ID: 76BF5F1928B9618B
3 changed files with 15 additions and 16 deletions

1
machines/chungus/configuration.nix
View file

@ -46,7 +46,6 @@
./service-atuin.nix
./service-forgejo.nix
./service-paperless-backup.nix
./service-paperless-healthchecks.nix
./service-paperless-tika.nix
./service-paperless.nix
./service-s3.nix

15
machines/chungus/service-paperless-healthchecks.nix
View file

@ -1,15 +0,0 @@
{
config,
pkgs,
lib,
factsGenerator,
...
}:
{
healthchecks.http.paperless = {
url = "http://paperless.chungus.private/accounts/login/?next=/";
expectedContent = "paperless.chungus.private";
};
}

15
machines/chungus/service-paperless.nix
View file

@ -39,13 +39,28 @@
networking.firewall.interfaces.wg0.allowedTCPPorts = [ config.services.paperless.port ];
networking.firewall.interfaces.${zerotierInterface}.allowedTCPPorts = [
config.services.paperless.port
80 # nginx
];
healthchecks.http.paperless-private = {
url = "http://paperless.chungus.private/accounts/login/?next=/";
expectedContent = "paperless.chungus.private";
};
healthchecks.http.paperless-port = {
url = "http://paperless.ingolf-wagner.de:${toString config.services.paperless.port}/accounts/login/?next=/";
expectedContent = "paperless.chungus.private";
};
healthchecks.http.paperless = {
url = "http://paperless.ingolf-wagner.de/accounts/login/?next=/";
expectedContent = "paperless.chungus.private";
};
services.nginx.virtualHosts."paperless.${config.networking.hostName}.private" = {
serverAliases = [ "paperless.ingolf-wagner.de" ];
extraConfig = ''
allow ${config.tinc.private.subnet};
allow ${config.wireguard.wg0.subnet};
allow ${config.clan.core.networking.zerotier.subnet};
deny all;
'';
locations."/" = {