pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

nachtigall: forgejo: update firewall settings

Browse source
This commit is contained in:
Hendrik Sokolowski 2024-04-05 18:39:43 +02:00
parent 4380c3b0ab
commit b6b8d69852
Signed by untrusted user: hensoko
GPG key ID: 5C36A01B80BCCC59
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hosts/nachtigall/apps/forgejo.nix
View file

@ -42,7 +42,7 @@
users.groups.gitea = {};
# Expose SSH port only for forgejo SSH
networking.firewall.interfaces.enp35s0.allowedTCPPorts = [ 22 ];
networking.firewall.interfaces.enp35s0.allowedTCPPorts = [ 2223 ];
networking.firewall.extraCommands = ''
iptables -t nat -i enp35s0 -I PREROUTING -p tcp --dport 22 -j REDIRECT --to-ports 2223
'';