nix machine / user configurations

feat: add anubis to protect forgejo

ptr.pet 31d5d3e5 ccc24c59

verified
Changed files
+8 -1
hosts
wolumonde
modules
+8 -1
hosts/wolumonde/modules/forgejo.nix
···
service = {
DISABLE_REGISTRATION = true;
};
+
security.REVERSE_PROXY_TRUSTED_PROXIES = "127.0.0.0/8,::1/128";
session.COOKIE_SECURE = true;
attachment = {
MAX_SIZE = 50;
···
extraConfig = ''
client_max_body_size 50m;
'';
-
proxyPass = "http://localhost:${toString config.services.forgejo.settings.server.HTTP_PORT}";
+
proxyPass = "http://localhost${config.services.anubis.instances."forgejo".settings.BIND}";
};
+
};
+
+
services.anubis.instances."forgejo" = {
+
settings.BIND = ":6293";
+
settings.BIND_NETWORK = "tcp";
+
settings.TARGET = "http://localhost:${toString config.services.forgejo.settings.server.HTTP_PORT}";
};
}