daniel/dotfiles
1
0
Fork 0
Code Activity Actions

mediaserver: add nginx

Browse source
This commit is contained in:
Daniel Kempkens 2023-04-14 16:21:39 +02:00
parent c516c9c3c9
commit 4841a89c3d
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
1 changed files with 15 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
system/nixos/nginx.nix
View file

@ -1,8 +1,5 @@
{ pkgs, lib, config, ... }:
let
interfaces = lib.mapAttrsToList (name: value: value.matchConfig.Name) config.systemd.network.networks ++ [ "tailscale0" ];
in
{
services.nginx = {
enable = true;
@ -29,15 +26,19 @@ in
'';
};
networking.firewall.interfaces = builtins.listToAttrs
(builtins.map
(iface:
{
name = iface;
value = {
allowedTCPPorts = [ 80 443 ];
allowedUDPPorts = [ 443 ];
};
})
(builtins.filter builtins.isString interfaces));
networking.firewall.interfaces =
let
interfaces = lib.mapAttrsToList (_: value: value.matchConfig.Name ? null) config.systemd.network.networks ++ [ "tailscale0" ];
in
builtins.listToAttrs
(builtins.map
(iface:
{
name = iface;
value = {
allowedTCPPorts = [ 80 443 ];
allowedUDPPorts = [ 443 ];
};
})
(builtins.filter builtins.isString interfaces));
}