rpqt/flocon
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

garage: also listen on wireguard network

Browse Source
This commit is contained in:
Romain Paquet
2025-11-29 14:11:50 +01:00
parent 4f197b4319
commit 8d328aecf3
1 changed files with 15 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
modules/garage.nix
View File

@@ -25,10 +25,10 @@ in
replication_factor = 3; replication_factor = 3;
rpc_bind_addr = "[::]:${toString rpc_port}"; rpc_bind_addr = "[::]:${toString rpc_port}";
rpc_public_addr = "[${zerotier_ip}]:${toString rpc_port}"; rpc_public_addr = "[::]:${toString rpc_port}";
s3_api = { s3_api = {
api_bind_addr = "[${zerotier_ip}]:${toString s3_port}"; api_bind_addr = "[::]:${toString s3_port}";
s3_region = "garage"; s3_region = "garage";
root_domain = ".s3.garage.home.rpqt.fr"; root_domain = ".s3.garage.home.rpqt.fr";
}; };
@@ -39,17 +39,22 @@ in
}; };
admin = { admin = {
api_bind_addr = "[${zerotier_ip}]:${toString admin_port}"; api_bind_addr = "[::]:${toString admin_port}";
# TODO: use metrics_token # TODO: use metrics_token
}; };
}; };
}; };
networking.firewall.interfaces.${zerotier_interface} = { networking.firewall.interfaces =
allowedTCPPorts = [ let
s3_port allowedTCPPorts = [
rpc_port s3_port
admin_port rpc_port
]; admin_port
}; ];
in
{
${zerotier_interface} = { inherit allowedTCPPorts; };
wireguard = { inherit allowedTCPPorts; };
};
} }