magic_rb/dotfiles
1
0
Fork 0
mirror of https://git.sr.ht/~magic_rb/dotfiles synced 2024-11-22 08:04:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Expose some services to semi wan

Browse source 
Signed-off-by: Magic_RB <magic_rb@redalder.org>
This commit is contained in:
Magic_RB 2023-09-02 22:47:38 +02:00
parent 055a8b3224
commit 410b6c0838
No known key found for this signature in database
GPG key ID: 08D5287CC5DDCA0E
3 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
nixos/systems/blowhole/nomad.nix
View file

@ -103,6 +103,7 @@ in
"docker.privileged.enabled" = "true";
};
host_network."wan".cidr = secret.network.networks.home.wan or "";
host_network."default".cidr = secret.network.networks.home.amsterdam or "";
host_network."mesh".cidr = secret.network.networks.vpn or "";

10
terranix/containers/ingress-blowhole/job.hcl
View file

@ -28,19 +28,29 @@ job "ingress" {
network {
mode = "bridge"
port "http-paccess" {
static = 80
to = 81
host_network = "wan"
}
port "http" {
static = 80
to = 80
host_network = "default"
}
port "https" {
static = 443
to = 443
host_network = "default"
}
port "imap" {
static = 143
to = 143
host_network = "default"
}
}

3
terranix/containers/ingress-blowhole/upstreams.conf
View file

@ -36,6 +36,7 @@ upstream matrix-mautrix-facebook {
server {
listen 80;
listen 81;
server_name jellyfin.in.redalder.org;
@ -84,6 +85,7 @@ server {
server {
listen 80;
listen 81;
server_name hass.in.redalder.org;
@ -254,6 +256,7 @@ server {
server {
listen 80;
listen 81;
server_name _;
include /local/security.conf;