Add separate rules for v4 and v6

This commit is contained in:
Hendrik Sokolowski 2024-04-05 20:07:27 +02:00
parent d888bc60b7
commit dd633ba55b
Signed by: hensoko
GPG key ID: 5C36A01B80BCCC59

View file

@ -43,12 +43,20 @@
# Expose SSH port only for forgejo SSH # Expose SSH port only for forgejo SSH
networking.firewall.interfaces.enp35s0.allowedTCPPorts = [ 2223 ]; networking.firewall.interfaces.enp35s0.allowedTCPPorts = [ 2223 ];
networking.nat.forwardPorts = [{ networking.nat.forwardPorts = [
proto = "tcp"; {
sourcePort = 22; proto = "tcp";
destination = "127.0.0.1:2223"; sourcePort = 22;
loopbackIPs = [ "138.201.80.102" "2a01:4f8:172:1c25::1" ]; destination = "127.0.0.1:2223";
}]; loopbackIPs = [ "138.201.80.102" ];
}
{
proto = "tcp";
sourcePort = 22;
destination = "[::1]:2223";
loopbackIPs = [ "2a01:4f8:172:1c25::1" ];
}
];
services.forgejo = { services.forgejo = {
enable = true; enable = true;