···

       
416
       
416
       
 
       


     

       
417
       
417
       
 
       
- `programs.clash-verge.tunMode` was deprecated and removed because now service mode is necessary to start program. Without `programs.clash-verge.enable`, clash-verge-rev will refuse to start.

     

       
418
       
418
       
 
       


     

       
419
       
419
       
+
       
- `services.homepage-dashboard` now requires the `allowedHosts` option to be set in accordance with the [documentation](https://gethomepage.dev/installation/#homepage_allowed_hosts).

     

       
420
       
420
       
+
       


     

       
419
       
421
       
 
       
- `services.netbird.tunnels` was renamed to [`services.netbird.clients`](#opt-services.netbird.clients),

     

       
420
       
422
       
 
       
  hardened (using dedicated less-privileged users) and significantly extended.

     

       
421
       
423
       
 
       


     

···

       
4
       
4
       
 
       
  lib,

     

       
5
       
5
       
 
       
  ...

     

       
6
       
6
       
 
       
}:

     

       
7
       
7
       
-
       


     

       
8
       
7
       
 
       
let

     

       
9
       
8
       
 
       
  cfg = config.services.homepage-dashboard;

     

       
10
       
9
       
 
       
  # Define the settings format used for this program

     
···

       
27
       
26
       
 
       
        type = lib.types.int;

     

       
28
       
27
       
 
       
        default = 8082;

     

       
29
       
28
       
 
       
        description = "Port for Homepage to bind to.";

     

       
29
       
29
       
+
       
      };

     

       
30
       
30
       
+
       


     

       
31
       
31
       
+
       
      allowedHosts = lib.mkOption {

     

       
32
       
32
       
+
       
        type = lib.types.str;

     

       
33
       
33
       
+
       
        default = "localhost:8082,127.0.0.1:8082";

     

       
34
       
34
       
+
       
        example = "example.com";

     

       
35
       
35
       
+
       
        description = ''

     

       
36
       
36
       
+
       
          Hosts that homepage-dashboard will be running under.

     

       
37
       
37
       
+
       
          You will want to change this in order to acess homepage from anything other than localhost.

     

       
38
       
38
       
+
       
          see the upsream documentation:

     

       
39
       
39
       
+
       


     

       
40
       
40
       
+
       
          <https://gethomepage.dev/installation/#homepage_allowed_hosts>

     

       
41
       
41
       
+
       
        '';

     

       
30
       
42
       
 
       
      };

     

       
31
       
43
       
 
       


     

       
32
       
44
       
 
       
      environmentFile = lib.mkOption {

     
···

       
215
       
227
       
 
       
        NIXPKGS_HOMEPAGE_CACHE_DIR = "/var/cache/homepage-dashboard";

     

       
216
       
228
       
 
       
        PORT = toString cfg.listenPort;

     

       
217
       
229
       
 
       
        LOG_TARGETS = "stdout";

     

       
230
       
230
       
+
       
        HOMEPAGE_ALLOWED_HOSTS = cfg.allowedHosts;

     

       
218
       
231
       
 
       
      };

     

       
219
       
232
       
 
       


     

       
220
       
233
       
 
       
      serviceConfig = {