rpqt/flocon
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

allow s3 api access on zerotier network

Browse Source
This commit is contained in:
Romain Paquet
2025-10-18 18:50:42 +02:00
parent c5a631b990
commit 88ebb508bf
1 changed files with 16 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
modules/garage.nix
View File

@@ -1,5 +1,6 @@
{ {
config, config,
lib,
pkgs, pkgs,
self, self,
... ...
@@ -8,39 +9,46 @@ let
zerotier_interface = "zts7mq7onf"; zerotier_interface = "zts7mq7onf";
zerotier_ip = zerotier_ip =
self.nixosConfigurations.${config.networking.hostName}.config.clan.core.vars.generators.zerotier.files.zerotier-ip.value; self.nixosConfigurations.${config.networking.hostName}.config.clan.core.vars.generators.zerotier.files.zerotier-ip.value;
s3_port = 3900;
rpc_port = 3901;
web_port = 3902;
admin_port = 3903;
in in
{ {
services.garage = { services.garage = {
package = pkgs.garage; package = pkgs.garage;
settings = { settings = {
metadata_dir = "/var/lib/garage/meta"; metadata_dir = "/var/lib/garage/meta";
data_dir = "/var/lib/garage/data"; data_dir = lib.mkDefault "/var/lib/garage/data";
db_engine = "sqlite"; db_engine = "sqlite";
replication_factor = 2; replication_factor = 3;
rpc_bind_addr = "[::]:3901"; rpc_bind_addr = "[::]:${toString rpc_port}";
rpc_public_addr = "[${zerotier_ip}]:3901"; rpc_public_addr = "[${zerotier_ip}]:${toString rpc_port}";
s3_api = { s3_api = {
api_bind_addr = "127.0.0.1:3900"; api_bind_addr = "[${zerotier_ip}]:${toString s3_port}";
s3_region = "garage"; s3_region = "garage";
root_domain = ".s3.garage.home.rpqt.fr"; root_domain = ".s3.garage.home.rpqt.fr";
}; };
s3_web = { s3_web = {
bind_addr = "127.0.0.1:3902"; bind_addr = "127.0.0.1:${toString web_port}";
root_domain = ".web.garage.home.rpqt.fr"; root_domain = ".web.garage.home.rpqt.fr";
}; };
admin = { admin = {
api_bind_addr = "[${zerotier_ip}]:3903"; api_bind_addr = "[${zerotier_ip}]:${toString admin_port}";
# TODO: use metrics_token # TODO: use metrics_token
}; };
}; };
}; };
networking.firewall.interfaces.${zerotier_interface} = { networking.firewall.interfaces.${zerotier_interface} = {
allowedTCPPorts = [ 3901 ]; allowedTCPPorts = [
s3_port
rpc_port
];
}; };
} }