lock down llm usage

This commit is contained in:
TheWanderingCrow 2025-07-11 11:26:59 -04:00
parent 72c17ae18e
commit c721d2e8f1

View file

@ -1,5 +1,5 @@
{
nginx = {
{inputs, ...}: {
services.nginx = {
enable = true;
recommendedProxySettings = true;
virtualHosts = {
@ -7,6 +7,11 @@
forceSSL = true;
useACMEHost = "chat.wanderingcrow.net";
locations."/" = {
extraConfig = ''
allow 192.168.0.0/16;
allow ${inputs.nix-secrets.network.primary.publicIP};
deny all;
'';
proxyPass = "http://192.168.0.72:3000";
proxyWebsockets = true;
};