macronova/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Update port config

Browse source
This commit is contained in:
Invariantspace 2023-11-27 13:19:16 -08:00
parent f2e2700acb
commit aa79162e2c
6 changed files with 33 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

3
linux/singularity/caddy.nix
View file

@ -1,7 +1,6 @@
{ config, ... }:
{
services.caddy = {
enable = true;
email = config.constants.postMaster;
@ -17,7 +16,7 @@
"${dn}".extraConfig = let wnm = wn "matrix"; in ''
header ${wnm}/* Content-Type application/json
header ${wnm}/* Access-Control-Allow-Origin *
respond ${wnm}/server `{ "m.server": "${mtfqdn}:443" }`
respond ${wnm}/server `{ "m.server": "${mtfqdn}:${toString config.constants.port.https}" }`
respond ${wnm}/client `{
"m.homeserver": { "base_url": "https://${mtfqdn}" },
"m.identity_server": { "base_url": "https://${mtfqdn}" }

14
linux/singularity/network.nix
View file

@ -1,22 +1,22 @@
{ config, ... }:
let hn = config.networking.hostName; in {
networking = let wg = { interface = "wgs"; port = 45556; }; in {
let hn = config.networking.hostName; port = config.constants.port; wgi = "wgs"; in {
networking = {
domain = config.constants.domain;
firewall = {
allowedTCPPorts = [ 80 443 50051 ];
allowedUDPPorts = [ wg.port ];
allowedTCPPorts = with port; [ http https xray ];
allowedUDPPorts = with port; [ wireguard-server ];
};
hostId = "2cadb253";
nat = {
enable = true;
externalInterface = "ens18";
internalInterfaces = [ wg.interface ];
internalInterfaces = [ wgi ];
};
nftables.enable = true;
wireguard.interfaces.${wg.interface} = {
wireguard.interfaces.${wgi} = {
ips = [ "10.32.54.76/24" ];
listenPort = wg.port;
listenPort = port.wireguard-server;
peers = [
{
allowedIPs = [ "10.32.54.2/32" ];