gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 04:19:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore(vouch): clean up local access

Browse source
This commit is contained in:
arcnmx 2024-02-19 15:16:49 -08:00
parent e4596f256f
commit 9274618cf0
9 changed files with 208 additions and 89 deletions
Download patch file Download diff file Expand all files Collapse all files

4
systems/tei/cloudflared.nix
View file

@ -69,10 +69,6 @@ in {
credentialsFile = config.sops.secrets.cloudflared-tunnel-apartment.path;
default = "http_status:404";
ingress = listToAttrs [
(ingressForNginx {
host = config.networking.domain;
inherit hostName;
})
(ingressForNginx {
host = config.services.zigbee2mqtt.domain;
inherit hostName;

10
systems/tei/nixos.nix
View file

@ -27,6 +27,16 @@ in {
./cloudflared.nix
];
services.nginx = let
inherit (config.services.nginx) access;
in {
virtualHosts = {
${access.zigbee2mqtt.domain} = {
local.denyGlobal = true;
};
};
};
sops.defaultSopsFile = ./secrets.yaml;
networking.firewall = {