jacob/nix_config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Switch to tailscale

Browse Source
This commit is contained in:
Jacob Hinkle 2024-01-23 12:51:40 -05:00
parent 8c55b64b21
commit f58dd6da01
3 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
machines/cj/configuration.nix
View File

@ -153,6 +153,7 @@
"127.0.0.0/8" # localhost "127.0.0.0/8" # localhost
"192.168.0.0/16" # LAN "192.168.0.0/16" # LAN
"160.91.241.229" # lucky "160.91.241.229" # lucky
"100.64.0.0" # tailscale
]; ];
}; };
@ -191,7 +192,7 @@
vaultwarden = { vaultwarden = {
enable = true; enable = true;
config = { # https://github.com/dani-garcia/vaultwarden/blob/1.25.2/.env.template config = { # https://github.com/dani-garcia/vaultwarden/blob/1.25.2/.env.template
DOMAIN = "https://vault.jhink.org"; DOMAIN = "http://100.64.0.2:8081";
ROCKET_ADDRESS = "0.0.0.0"; ROCKET_ADDRESS = "0.0.0.0";
ROCKET_PORT = 8222; ROCKET_PORT = 8222;
SIGNUPS_ALLOWED = false; SIGNUPS_ALLOWED = false;

10
machines/cj/firewall.nix
View File

@ -4,13 +4,13 @@
8080 8443 6789 8880 8843 27117 # unifi controller: https://help.ui.com/hc/en-us/articles/218506997-UniFi-Network-Required-Ports-Reference 8080 8443 6789 8880 8843 27117 # unifi controller: https://help.ui.com/hc/en-us/articles/218506997-UniFi-Network-Required-Ports-Reference
8585 # pihole web 8585 # pihole web
53 # pihole 53 # pihole
#8123 # home-assistant 8123 # home-assistant
#3000 # gitea 3000 # gitea
8081 # vaultwarden 8081 # vaultwarden
80 443 # reverse proxy 80 443 # reverse proxy
]; ];
allowedUDPPorts = [ allowedUDPPorts = [
22000 21027 # syncthing #22000 21027 # syncthing
3478 5514 10001 1900 123 # unifi 3478 5514 10001 1900 123 # unifi
53 # pihole 53 # pihole
80 443 # reverse proxy 80 443 # reverse proxy
@ -18,4 +18,8 @@
allowedUDPPortRanges = [ allowedUDPPortRanges = [
{ from = 5656; to = 5699; } # unifi { from = 5656; to = 5699; } # unifi
]; ];
# This should not really be necessary unless we use an exit node or subnet
# with tailscale I think.
checkReversePath = "loose";
} }

2
machines/cj/syncthing.nix
View File

@ -1,5 +1,5 @@
{ {
enable = true; enable = false;
dataDir = "/serverdata/syncthing/"; dataDir = "/serverdata/syncthing/";
user = "jacob"; user = "jacob";
group = "users"; group = "users";