cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

containers: don't use wildcard nat interfaces

Browse source
This commit is contained in:
Cilly Leang 2026-03-16 00:45:05 +11:00
parent 5722249dd2
commit 249942280d
Signed by: cilly
GPG key ID: 6500251E087653C9
2 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
containers/amethyst/flake.nix
View file

@ -14,10 +14,10 @@
networking.nat = { networking.nat = {
enable = true; enable = true;
enableIPv6 = true; enableIPv6 = true;
internalInterfaces = [ "ve-+" ]; internalInterfaces = [ "ve-${name}" ];
}; };
services.nginx.virtualHosts."amethyst.local.lava.moe" = { services.nginx.virtualHosts."${name}.local.lava.moe" = {
useACMEHost = "lava.moe"; useACMEHost = "lava.moe";
forceSSL = true; forceSSL = true;
locations."/".proxyPass = "http://[fd0d:1::${subnet}:2]:9091"; locations."/".proxyPass = "http://[fd0d:1::${subnet}:2]:9091";

4
containers/beryllium/flake.nix
View file

@ -14,10 +14,10 @@
networking.nat = { networking.nat = {
enable = true; enable = true;
enableIPv6 = true; enableIPv6 = true;
internalInterfaces = [ "ve-+" ]; internalInterfaces = [ "ve-${name}" ];
}; };
services.nginx.virtualHosts."beryllium.lava.moe" = { services.nginx.virtualHosts."${name}.lava.moe" = {
useACMEHost = "lava.moe"; useACMEHost = "lava.moe";
forceSSL = true; forceSSL = true;
locations."/".extraConfig = "return 302 'https://lava.moe';"; locations."/".extraConfig = "return 302 'https://lava.moe';";