rpqt/flocon
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

garage: also listen on wireguard network

Browse Source
This commit is contained in:
Romain Paquet
2025-11-29 14:11:50 +01:00
parent 4f197b4319
commit 8d328aecf3
1 changed files with 15 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
modules/garage.nix
View File

@@ -25,10 +25,10 @@ in
replication_factor = 3;
rpc_bind_addr = "[::]:${toString rpc_port}";
rpc_public_addr = "[${zerotier_ip}]:${toString rpc_port}";
rpc_public_addr = "[::]:${toString rpc_port}";
s3_api = {
api_bind_addr = "[${zerotier_ip}]:${toString s3_port}";
api_bind_addr = "[::]:${toString s3_port}";
s3_region = "garage";
root_domain = ".s3.garage.home.rpqt.fr";
};
@@ -39,17 +39,22 @@ in
};
admin = {
api_bind_addr = "[${zerotier_ip}]:${toString admin_port}";
api_bind_addr = "[::]:${toString admin_port}";
# TODO: use metrics_token
};
};
};
networking.firewall.interfaces.${zerotier_interface} = {
networking.firewall.interfaces =
let
allowedTCPPorts = [
s3_port
rpc_port
admin_port
];
in
{
${zerotier_interface} = { inherit allowedTCPPorts; };
wireguard = { inherit allowedTCPPorts; };
};
}