qbit/xin
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

box: only expose graph on local net

Browse Source
This commit is contained in:
Aaron Bieber 2022-11-25 13:06:29 -07:00
parent 28535545da
commit a272eeab0b
No known key found for this signature in database
3 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
hosts/box/default.nix
View File

@ -70,6 +70,8 @@ in {
sops.secrets.reddit_key = mkNginxSecret;
sops.secrets.sonarr_cert = mkNginxSecret;
sops.secrets.sonarr_key = mkNginxSecret;
sops.secrets.graph_cert = mkNginxSecret;
sops.secrets.graph_key = mkNginxSecret;
boot.supportedFilesystems = [ "zfs" ];
boot.loader.grub.copyKernels = true;
@ -696,9 +698,10 @@ in {
};
};
${config.services.grafana.settings.server.domain} = {
"graph.bold.daemon" = {
sslCertificateKey = "${config.sops.secrets.graph_key.path}";
sslCertificate = "${config.sops.secrets.graph_cert.path}";
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:${

1
hosts/europa/default.nix
View File

@ -80,7 +80,6 @@ in {
virtualisation.libvirtd.enable = true;
programs.dconf.enable = true;
networking.hosts."100.120.151.126" = [ "graph.tapenet.org" ];
networking = {
hostName = "europa";
hostId = "87703c3e";

1
hosts/faf/default.nix
View File

@ -114,6 +114,7 @@ in {
''"radarr.bold.daemon. IN A 100.120.151.126"''
''"reddit.bold.daemon. IN A 100.120.151.126"''
''"sonarr.bold.daemon. IN A 100.120.151.126"''
''"graph.bold.daemon. IN A 100.120.151.126"''
];
};
};