1
0
Fork 0

mastodon: Only listen on localhost

This commit is contained in:
Daniel Kempkens 2022-12-26 18:08:25 +01:00
parent 984b087834
commit 5547896f51
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM

View file

@ -94,6 +94,13 @@ in
services.nginx = { services.nginx = {
enable = true; enable = true;
virtualHosts."${web-domain}" = { virtualHosts."${web-domain}" = {
listen = [
{
addr = "127.0.0.1";
port = 80;
}
];
root = "${config.services.mastodon.package}/public/"; root = "${config.services.mastodon.package}/public/";
forceSSL = false; forceSSL = false;
enableACME = false; enableACME = false;
@ -119,6 +126,4 @@ in
}; };
users.groups.mastodon.members = [ config.services.nginx.user ]; users.groups.mastodon.members = [ config.services.nginx.user ];
networking.firewall.allowedTCPPorts = [ 80 ];
} }