Expose firewall port and chat redirect

2022-04-26 02:40:32 +01:00
parent 9f852c7202
commit 161f26b3f3
2 changed files with 13 additions and 2 deletions
--- a/hosts/dingserver/caddy.nix
+++ b/hosts/dingserver/caddy.nix
@@ -25,8 +25,11 @@
        extraConfig = ''
          header /.well-known/* "Access-Control-Allow-Origin" "*"
          respond /.well-known/matrix/client "{\"m.homeserver\": {\"base_url\": \"https://broccoli.town\"}}"
+
          reverse_proxy /_matrix/* http://localhost:8008
          reverse_proxy /_synapse/client/* http://localhost:8008
+
+          redir / https://chat.broccoli.town
        '';
      };

--- a/hosts/dingserver/configuration.nix
+++ b/hosts/dingserver/configuration.nix
@@ -22,8 +22,16 @@
  boot.loader.grub.version = 2;
  boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only

-  networking.hostName = "dingserver";
-  networking.interfaces.ens3.useDHCP = true;
+  networking = {
+    hostName = "dingserver";
+    interfaces.ens3.useDHCP = true;
+
+    firewall.interfaces = {
+      "tailscale0" = {
+        allowedUDPPorts = [ 41641 ];
+      };
+    };
+  };

  environment.systemPackages = with pkgs; [
    helix