pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

Add separate rules for v4 and v6

Browse source
This commit is contained in:
Hendrik Sokolowski 2024-04-05 20:07:27 +02:00
parent d888bc60b7
commit dd633ba55b
Signed by untrusted user: hensoko
GPG key ID: 5C36A01B80BCCC59
1 changed files with 14 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
hosts/nachtigall/apps/forgejo.nix
View file

@ -43,12 +43,20 @@
# Expose SSH port only for forgejo SSH
networking.firewall.interfaces.enp35s0.allowedTCPPorts = [ 2223 ];
networking.nat.forwardPorts = [{
proto = "tcp";
sourcePort = 22;
destination = "127.0.0.1:2223";
loopbackIPs = [ "138.201.80.102" "2a01:4f8:172:1c25::1" ];
}];
networking.nat.forwardPorts = [
{
proto = "tcp";
sourcePort = 22;
destination = "127.0.0.1:2223";
loopbackIPs = [ "138.201.80.102" ];
}
{
proto = "tcp";
sourcePort = 22;
destination = "[::1]:2223";
loopbackIPs = [ "2a01:4f8:172:1c25::1" ];
}
];
services.forgejo = {
enable = true;