gitea: Open gitea to public
This commit is contained in:
parent
d287b55eff
commit
be4584aa08
@ -3,6 +3,7 @@
|
|||||||
let
|
let
|
||||||
domain = "git.giugl.io";
|
domain = "git.giugl.io";
|
||||||
network = import ./network.nix;
|
network = import ./network.nix;
|
||||||
|
auth_block = (import ./openid.nix { inherit lib; }).openresty_oidc_block;
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
services.gitea = {
|
services.gitea = {
|
||||||
@ -25,13 +26,8 @@ in
|
|||||||
enableACME = true;
|
enableACME = true;
|
||||||
locations."/" = {
|
locations."/" = {
|
||||||
proxyPass = "http://127.0.0.1:3000";
|
proxyPass = "http://127.0.0.1:3000";
|
||||||
extraConfig = ''
|
# it does not work, it breaks gitea's web portal
|
||||||
allow 127.0.0.1;
|
# extraConfig = auth_block { access_role = "git"; };
|
||||||
allow 10.0.0.0/24;
|
|
||||||
${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg}
|
|
||||||
allow 10.4.0.0/24;
|
|
||||||
deny all;
|
|
||||||
'';
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user