containers/beryllium: use ipv4

This commit is contained in:
Cilly Leang 2026-03-26 19:01:45 +11:00
parent 724d30a092
commit 218da08936
Signed by: cilly
GPG key ID: 6500251E087653C9
2 changed files with 8 additions and 9 deletions

View file

@ -9,14 +9,15 @@
networking.firewall.allowedUDPPorts = [ 6167 ]; networking.firewall.allowedUDPPorts = [ 6167 ];
# TODO: this should be generically set # TODO: this should be generically set
networking.useHostResolvConf = false; networking.useHostResolvConf = false;
networking.nameservers = [ "fd0d:1::2:1" ]; networking.nameservers = [ "8.8.8.8" ];
services.matrix-continuwuity = { services.matrix-continuwuity = {
enable = true; enable = true;
settings.global = { settings.global = {
# TODO: link this with outer container's address # TODO: link this with outer container's address
address = [ "fd0d:1::2:2" ]; address = [ "10.30.2.2" ];
server_name = "lava.moe"; server_name = "lava.moe";
rocksdb_recovery_mode = 2;
}; };
}; };
} }

View file

@ -22,9 +22,9 @@
useACMEHost = "lava.moe"; useACMEHost = "lava.moe";
forceSSL = true; forceSSL = true;
locations."/".extraConfig = "return 302 'https://lava.moe';"; locations."/".extraConfig = "return 302 'https://lava.moe';";
locations."/_matrix".proxyPass = "http://[fd0d:1::${subnet}:2]:6167"; locations."/_matrix".proxyPass = "http://10.30.${subnet}.2:6167";
locations."/_conduwuit".proxyPass = "http://[fd0d:1::${subnet}:2]:6167"; locations."/_conduwuit".proxyPass = "http://10.30.${subnet}.2:6167";
locations."/_continuwuity".proxyPass = "http://[fd0d:1::${subnet}:2]:6167"; locations."/_continuwuity".proxyPass = "http://10.30.${subnet}.2:6167";
}; };
services.nginx.virtualHosts."lava.moe" = { services.nginx.virtualHosts."lava.moe" = {
@ -52,9 +52,8 @@
containers.${name} = { containers.${name} = {
autoStart = true; autoStart = true;
privateNetwork = true; privateNetwork = true;
hostAddress6 = "fd0d:1::${subnet}:1"; hostAddress = "10.30.${subnet}.1";
localAddress6 = "fd0d:1::${subnet}:2"; localAddress = "10.30.${subnet}.2";
# privateUsers = "pick";
nixpkgs = nixpkgs; nixpkgs = nixpkgs;
ephemeral = true; ephemeral = true;
config = { imports = [ ./configuration.nix ]; }; config = { imports = [ ./configuration.nix ]; };
@ -64,7 +63,6 @@
mountPoint = "/persist"; mountPoint = "/persist";
isReadOnly = false; isReadOnly = false;
}; };
# flake = "path:" + ./.;
}; };
}; };
}; };