peperunas/nixos
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

gitea: Open gitea to public

Browse Source
This commit is contained in:
Giulio De Pasquale 2022-12-22 15:11:23 +01:00
parent d287b55eff
commit be4584aa08
1 changed files with 3 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
hosts/architect/gitea.nix
View File

@ -3,6 +3,7 @@
let
domain = "git.giugl.io";
network = import ./network.nix;
auth_block = (import ./openid.nix { inherit lib; }).openresty_oidc_block;
in
{
services.gitea = {
@ -25,13 +26,8 @@ in
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3000";
extraConfig = ''
allow 127.0.0.1;
allow 10.0.0.0/24;
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg}
allow 10.4.0.0/24;
deny all;
'';
# it does not work, it breaks gitea's web portal
# extraConfig = auth_block { access_role = "git"; };
};
};