loki: allow port 3100 in firewall for wg-ssh interface

2024-06-05 01:59:25 +02:00 · 2024-06-05 01:59:25 +02:00 · 27c239b985
parent 61ea0ad7c2
commit 27c239b985
1 changed files with 3 additions and 0 deletions
--- a/modules/loki/default.nix
+++ b/modules/loki/default.nix
@ -6,6 +6,9 @@
  ...
 }:
 {
+  # Only expose loki port via wireguard interface
+  networking.firewall.interfaces.wg-ssh.allowedTCPPorts = [ 3100 ];
+
  # source: https://gist.github.com/rickhull/895b0cb38fdd537c1078a858cf15d63e
  # https://grafana.com/docs/loki/latest/configure/examples/#1-local-configuration-exampleyaml
  services.loki = {