From e8cf4dceb007773d5f7949aad26b5a0ce3c57919 Mon Sep 17 00:00:00 2001
From: teutat3s <teutates@mailbox.org>
Date: Tue, 12 Dec 2023 19:58:07 +0100
Subject: [PATCH] fix(flora-6): allow traffic from br-+ interfaces

---
 hosts/flora-6/apps/forgejo-actions-runner.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/hosts/flora-6/apps/forgejo-actions-runner.nix b/hosts/flora-6/apps/forgejo-actions-runner.nix
index 2f7cba4c..28897ef2 100644
--- a/hosts/flora-6/apps/forgejo-actions-runner.nix
+++ b/hosts/flora-6/apps/forgejo-actions-runner.nix
@@ -10,6 +10,10 @@
     mode = "644";
   };
 
+  # Trust docker bridge interface traffic
+  # Needed for the docker runner to communicate with the act_runner cache
+  networking.firewall.trustedInterfaces = [ "br-+" ];
+
   # forgejo actions runner
   # https://forgejo.org/docs/latest/admin/actions/
   # https://docs.gitea.com/usage/actions/quickstart