From e17d9f5a455910f661390feb5a645eca1a7b389d Mon Sep 17 00:00:00 2001
From: Giulio De Pasquale <depasquale+git@giugl.io>
Date: Fri, 11 Nov 2022 19:12:24 +0100
Subject: [PATCH] calibre, gitea, invidious, matrix, minio, navidrome, nitter:
 Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress

---
 hosts/architect/calibre.nix   | 2 +-
 hosts/architect/gitea.nix     | 2 +-
 hosts/architect/invidious.nix | 2 +-
 hosts/architect/matrix.nix    | 4 ++--
 hosts/architect/minio.nix     | 2 +-
 hosts/architect/navidrome.nix | 2 +-
 hosts/architect/nitter.nix    | 2 +-
 7 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/hosts/architect/calibre.nix b/hosts/architect/calibre.nix
index c10603b..c50d8ca 100644
--- a/hosts/architect/calibre.nix
+++ b/hosts/architect/calibre.nix
@@ -18,7 +18,7 @@ in {
       forceSSL = true;
       enableACME = true;
       locations."/" = {
-        proxyPass = "http://localhost:8083";
+        proxyPass = "http://127.0.0.1:8083";
         extraConfig = ''
           client_max_body_size 500M;
         '';
diff --git a/hosts/architect/gitea.nix b/hosts/architect/gitea.nix
index 45bc128..9dc0902 100644
--- a/hosts/architect/gitea.nix
+++ b/hosts/architect/gitea.nix
@@ -18,7 +18,7 @@ in {
     forceSSL = true;
     enableACME = true;
     locations."/" = {
-      proxyPass = "http://localhost:3000";
+      proxyPass = "http://127.0.0.1:3000";
       extraConfig = ''
         allow 127.0.0.1;
         allow 10.0.0.0/24;
diff --git a/hosts/architect/invidious.nix b/hosts/architect/invidious.nix
index eaf9d64..e2249a8 100644
--- a/hosts/architect/invidious.nix
+++ b/hosts/architect/invidious.nix
@@ -13,7 +13,7 @@ in {
     nginx.virtualHosts.${domain} = {
       forceSSL = true;
       enableACME = true;
-      locations."/" = { proxyPass = "http://localhost:9092"; };
+      locations."/" = { proxyPass = "http://127.0.0.1:9092"; };
     };
   };
 
diff --git a/hosts/architect/matrix.nix b/hosts/architect/matrix.nix
index 49d5f66..38d24b2 100644
--- a/hosts/architect/matrix.nix
+++ b/hosts/architect/matrix.nix
@@ -25,7 +25,7 @@ in {
         ];
         listeners = [{
           port = 8008;
-          bind_addresses = [ "::1" ];
+          bind_addresses = [ "127.0.0.1" ];
           type = "http";
           tls = false;
           x_forwarded = true;
@@ -86,7 +86,7 @@ in {
 
         # forward all Matrix API calls to the synapse Matrix homeserver
         locations."/_matrix" = {
-          proxyPass = "http://[::1]:8008"; # without a trailing /
+          proxyPass = "http://127.0.0.1:8008"; # without a trailing /
         };
       };
 
diff --git a/hosts/architect/minio.nix b/hosts/architect/minio.nix
index 8b2a760..a4fc127 100644
--- a/hosts/architect/minio.nix
+++ b/hosts/architect/minio.nix
@@ -11,7 +11,7 @@ in {
       forceSSL = true;
       enableACME = true;
       locations."/" = {
-        proxyPass = "http://localhost:9000";
+        proxyPass = "http://127.0.0.1:9000";
         extraConfig = ''
           allow 10.0.0.0/24;
           ${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg}
diff --git a/hosts/architect/navidrome.nix b/hosts/architect/navidrome.nix
index 2803c1a..9d417bb 100644
--- a/hosts/architect/navidrome.nix
+++ b/hosts/architect/navidrome.nix
@@ -26,7 +26,7 @@ in {
       forceSSL = true;
       enableACME = true;
       locations."/" = {
-        proxyPass = "http://localhost:4533";
+        proxyPass = "http://127.0.0.1:4533";
         #        extraConfig = ''
         #          allow 10.0.0.0/24;
         #          ${lib.concatMapStrings (x: "allow ${x};") network.gdevices-wg}
diff --git a/hosts/architect/nitter.nix b/hosts/architect/nitter.nix
index 980bccc..5742c76 100644
--- a/hosts/architect/nitter.nix
+++ b/hosts/architect/nitter.nix
@@ -21,7 +21,7 @@ in {
     nginx.virtualHosts.${domain} = {
       forceSSL = true;
       enableACME = true;
-      locations."/" = { proxyPass = "http://localhost:9093"; };
+      locations."/" = { proxyPass = "http://127.0.0.1:9093"; };
     };
   };