glennwso/nixos-selfhost
1
0
Fork 0
Code Issues 2 Pull requests Packages Projects Releases Wiki Activity

moved firewall and acme

Browse source
This commit is contained in:
admin 2024-03-02 07:56:40 +01:00
parent b639a6cd85
commit c76fcf6f92
2 changed files with 11 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
configuration.nix
View file

@ -128,8 +128,19 @@
services.openssh.enable = true; services.openssh.enable = true;
services.openssh.settings.PasswordAuthentication = false; services.openssh.settings.PasswordAuthentication = false;
# services.openssh.settings.PermitRootLogin = "proh"; # services.openssh.settings.PermitRootLogin = "proh";
security.acme = {
acceptTerms = true;
defaults = {
email = "glennpub@proton.me";
dnsProvider = "cloudflare";
# # location of your CLOUDFLARE_DNS_API_TOKEN=[value]
# # https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#EnvironmentFile=
environmentFile = "/etc/nixos/.secrets/cloudflare_dns_tokend";
};
};
# Open ports in the firewall. # Open ports in the firewall.
networking.firewall.allowedTCPPorts = [ 80 443 ];
# networking.firewall.allowedTCPPorts = [ ... ]; # networking.firewall.allowedTCPPorts = [ ... ];
# networking.firewall.allowedUDPPorts = [ ... ]; # networking.firewall.allowedUDPPorts = [ ... ];
# Or disable the firewall altogether. # Or disable the firewall altogether.

11
forgejo.nix
View file

@ -5,17 +5,6 @@ let
# derp = "hi"; # derp = "hi";
in in
{ {
security.acme = {
acceptTerms = true;
defaults = {
email = "glennpub@proton.me";
dnsProvider = "cloudflare";
# # location of your CLOUDFLARE_DNS_API_TOKEN=[value]
# # https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#EnvironmentFile=
environmentFile = "/etc/nixos/.secrets/cloudflare_dns_tokend";
};
};
networking.firewall.allowedTCPPorts = [ 80 443 3000 ];
services.forgejo = { services.forgejo = {
enable = true; enable = true;
settings = { settings = {