hacc/haccfiles
8
0
Fork 1
Code Issues 1 Pull requests Projects Releases Wiki Activity

nextcloud: add network to container

Browse source 
this appears to break nix in a way in which nix should not be possible to break.
This commit is contained in:
stuebinm 2021-03-26 00:11:06 +01:00 committed by schweby
parent 2e9dc554df
commit a04a3c917f
No known key found for this signature in database
GPG key ID: B880491D046E2F87
1 changed files with 20 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
hosts/hainich/services/nextcloud.nix
View file

@ -19,8 +19,8 @@
autoStart = true;
privateNetwork = true;
hostAddress6 = "fd00::10:1";
localAddress6 = "fd00::10:2";
hostAddress = "192.168.110.1";
localAddress = "192.168.110.10";
config = { pkgs, ... }: {
@ -44,7 +44,7 @@
# there's also a adminpassFile option, but for testing this seems
# enough (less fiddling with getting the file into a nixos
# container for ad-hoc setups)
adminpass = "root";
adminpass = "lushfjwebrwhjebr";
adminuser = "root";
};
@ -113,13 +113,28 @@
after = ["postgresql.service"];
};
networking.firewall.allowedTCPPorts = [ 80 443 ];
networking.firewall.enable = false;
services.coredns = {
enable = true;
config = ''
.:53 {
forward . 1.1.1.1
}
'';
};
};
};
services.nginx.virtualHosts."cloud2.infra4future.de" = {
locations."/".proxyPass = "http://[${config.containers.nextcloud.localAddress6}]:80";
locations."/".proxyPass = "http://${config.containers.nextcloud.localAddress}:80";
enableACME = true;
forceSSL = true;
};
networking.nat.enable = true;
networking.nat.internalInterfaces = ["ve-nextcloud"];
networking.nat.externalInterface = "enp6s0";
}