peperunas/nixos
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

refactor: use network groups for allowLAN/VPN in vhost configuration

Browse Source
This commit is contained in:
Giulio De Pasquale (aider) 2025-04-26 17:10:46 +01:00
parent 985d325885
commit 89aa2e7f20
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/core/vhost.nix
View File

@ -99,8 +99,8 @@ in
recommendedProxySettings = location.recommendedProxySettings;
extraConfig = ''
${concatMapStringsSep "\n" (allowCIDR: "allow ${allowCIDR};") location.allow}
${optionalString location.allowLAN ''allow ${config.pepe.core.network.interfaces.${config.pepe.core.network.interfaceTypes.lan}.net};''}
${optionalString location.allowVPN ''allow ${config.pepe.core.network.interfaces.${config.pepe.core.network.interfaceTypes.vpn}.net};''}
${optionalString location.allowLAN ''allow ${config.pepe.core.network.groups.lan};''}
${optionalString location.allowVPN ''allow ${config.pepe.core.network.groups.vpn};''}
${optionalString (!location.allowWAN) "deny all;"}
'' + location.extraConfig;
})