TheWanderingCrow/CrOS
1
0
Fork 0
mirror of https://github.com/TheWanderingCrow/CrOS.git synced 2026-01-11 17:54:08 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

deny all rules

Browse source
This commit is contained in:
TheWanderingCrow 2025-02-15 10:44:32 -05:00
parent d46e581ddf
commit 8fb8e39de4
5 changed files with 21 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
modules/users/overseer/services/bar-assistant.nix
View file

@ -37,6 +37,11 @@ in
enable = true;
recommendedProxySettings = true;
virtualHosts = {
extraConfig = ''
allow 192.168.0.0/16;
allow 10.8.0.0/24;
deny all;
'';
"bar.wanderingcrow.net" = {
forceSSL = true;
useACMEHost = "bar.wanderingcrow.net";

5
modules/users/overseer/services/bookstack.nix
View file

@ -35,6 +35,11 @@ in
appKeyFile = config.sops.secrets."bookstack/key".path;
nginx = {
forceSSL = true;
extraConfig = ''
allow 192.168.0.0/16;
allow 10.8.0.0/24;
deny all;
'';
useACMEHost = "bookstack.wanderingcrow.net";
};
};

5
modules/users/overseer/services/grocy.nix
View file

@ -7,6 +7,11 @@ lib.mkIf config.user.overseer.enable {
services.nginx.virtualHosts."grocy.wanderingcrow.net" = {
forceSSL = true;
useACMEHost = "grocy.wanderingcrow.net";
extraConfig = ''
allow 192.168.0.0/16;
allow 10.8.0.0/24;
deny all;
'';
};
services.grocy = {

5
modules/users/overseer/services/homebox.nix
View file

@ -26,6 +26,11 @@ lib.mkIf config.user.overseer.enable {
forceSSL = true;
useACMEHost = "homebox.wanderingcrow.net";
locations."/" = {
extraConfig = ''
allow 192.168.0.0/16;
allow 10.8.0.0/24;
deny all;
'';
proxyPass = "http://localhost:7745";
proxyWebsockets = true;
};

1
modules/users/overseer/services/homepage.nix
View file

@ -24,6 +24,7 @@ lib.mkIf config.user.overseer.enable {
locations."/" = {
extraConfig = ''
allow 192.168.0.0/16;
allow 10.8.0.0/24;
deny all;
'';
proxyPass = "http://localhost:8082";