Turns out I need port 80 for acme, whoops

This commit is contained in:
Bun 2025-04-04 05:17:25 -04:00
parent 6069da2e1d
commit 2d61e291a9
4 changed files with 11 additions and 9 deletions

View file

@ -3,12 +3,11 @@
services.blocky = { services.blocky = {
settings = { settings = {
upstreams.groups.default = [ upstreams.groups.default = [
"2606:4700:4700::1111" "2606:4700:4700::1111"
"2606:4700:4700::1001" "2606:4700:4700::1001"
"1.1.1.1" "1.1.1.1"
"1.0.0.1" "1.0.0.1"
]; ];
blocking = { blocking = {
clientGroupsBlock.default = [ clientGroupsBlock.default = [
"pro" "pro"
@ -19,7 +18,6 @@
"tif" = [ "https://codeberg.org/hagezi/mirror2/raw/branch/main/dns-blocklists/wildcard/tif.txt" ]; "tif" = [ "https://codeberg.org/hagezi/mirror2/raw/branch/main/dns-blocklists/wildcard/tif.txt" ];
}; };
}; };
caching = { caching = {
prefetching = true; prefetching = true;
minTime = "1m"; minTime = "1m";

View file

@ -5,9 +5,10 @@
config = lib.mkIf config.services.forgejo.enable { config = lib.mkIf config.services.forgejo.enable {
services.forgejo = { services.forgejo = {
package = pkgs.forgejo; package = pkgs.forgejo;
lfs.enable = true;
settings = { settings = {
server = { server = {
DOMAIN = "git.nixfox.ca"; DOMAIN = "sv.nixfox.ca";
ROOT_URL = "https://git.nixfox.ca:443"; ROOT_URL = "https://git.nixfox.ca:443";
HTTP_PORT = 3110; HTTP_PORT = 3110;
SSH_PORT = 2299; SSH_PORT = 2299;

View file

@ -1,8 +1,8 @@
{ config, lib, ... }: { config, ... }:
{ {
imports = [ ./nginx ]; imports = [ ./nginx ];
nixpkgs.config.element-web.conf = lib.mkIf config.services.matrix-synapse.enable { nixpkgs.config.element-web.conf = {
default_server_config."m.homeserver" = { default_server_config."m.homeserver" = {
base_url = "https://matrix.nixfox.ca"; base_url = "https://matrix.nixfox.ca";
server_name = "matrix.nixfox.ca"; server_name = "matrix.nixfox.ca";

View file

@ -16,6 +16,9 @@
recommendedGzipSettings = true; recommendedGzipSettings = true;
recommendedProxySettings = true; recommendedProxySettings = true;
}; };
networking.firewall.allowedTCPPorts = [ 443 ]; networking.firewall.allowedTCPPorts = [
80
443
];
}; };
} }