cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

containers/diamond: only listen on local addresses

Browse source 
TIL nginx will only route via amethyst if it's on local address, even if
hostname doesn't match
This commit is contained in:
Cilly Leang 2026-03-17 17:25:35 +11:00
parent 55e0d25251
commit b7665d9bd5
Signed by: cilly
GPG key ID: 6500251E087653C9
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
containers/diamond/flake.nix
View file

@ -24,6 +24,7 @@
useACMEHost = "lava.moe"; useACMEHost = "lava.moe";
forceSSL = true; forceSSL = true;
locations."/".proxyPass = "http://[${client}]:8000"; locations."/".proxyPass = "http://[${client}]:8000";
listenAddresses = [ "10.0.0.1" "[fd0d::1]" ];
}; };
systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ]; systemd.tmpfiles.rules = [ "d /persist/containers/${name} 755 root users" ];