rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(nixos/forgejo): open firewall if enabled

Browse source
This commit is contained in:
Mohammad Rafiq 2025-06-20 08:26:01 +08:00
parent 70a787f89c
commit bfa119df31
No known key found for this signature in database
2 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
modules/nixos/server/web-apps/forgejo/default.nix
View file

@ -1,6 +1,6 @@
{ config, lib, ... }: { config, lib, ... }:
let let
inherit (lib) singleton; inherit (lib) singleton optional;
inherit (lib.pantheon) mkPortOption; inherit (lib.pantheon) mkPortOption;
inherit (lib.pantheon.modules) mkWebApp; inherit (lib.pantheon.modules) mkWebApp;
cfg = config.server.web-apps.forgejo; cfg = config.server.web-apps.forgejo;
@ -18,6 +18,7 @@ mkWebApp {
sshPort = mkPortOption 2222; sshPort = mkPortOption 2222;
}; };
extraConfig = { extraConfig = {
networking.firewall.allowedTCPPorts = optional cfg.openFirewall cfg.sshPort;
services.forgejo = { services.forgejo = {
enable = true; enable = true;
settings = { settings = {

1
systems/x86_64-linux/apollo/default.nix
View file

@ -34,6 +34,7 @@
librechat.domain = "chat.bwfiq.com"; librechat.domain = "chat.bwfiq.com";
forgejo.enable = true; forgejo.enable = true;
forgejo.domain = "git.rrv.sh"; forgejo.domain = "git.rrv.sh";
forgejo.openFirewall = true;
glance.enable = true; glance.enable = true;
glance.domain = "glance.bwfiq.com"; glance.domain = "glance.bwfiq.com";
}; };