makefu/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

m 1 wry: forbid external paste access

Browse source
This commit is contained in:
makefu 2016-12-25 01:08:49 +01:00
parent dec5f927d6
commit 6b4f2995f4
1 changed files with 6 additions and 6 deletions

12
1systems/wry.nix
View file

@ -13,7 +13,7 @@ in {
../2configs/fs/CAC-CentOS-7-64bit.nix ../2configs/fs/CAC-CentOS-7-64bit.nix
../2configs/save-diskspace.nix ../2configs/save-diskspace.nix
# ../2configs/bepasty-dual.nix ../2configs/bepasty-dual.nix
../2configs/iodined.nix ../2configs/iodined.nix
../2configs/backup.nix ../2configs/backup.nix
@ -45,14 +45,14 @@ in {
random-emoji ]; random-emoji ];
}; };
# bepasty to listen only on the correct interfaces
krebs.bepasty.servers.internal.nginx.listen = [ "${internal-ip}:80" ];
krebs.bepasty.servers.external.nginx.listen = [ "${external-ip}:80" "${external-ip}:443 ssl" ];
# prepare graphs # prepare graphs
services.nginx.enable = true; services.nginx.enable = true;
krebs.retiolum-bootstrap.enable = true; krebs.retiolum-bootstrap.enable = true;
krebs.bepasty.servers."paste.r".nginx.extraConfig = ''
if ( $server_addr = "${external-ip}" ) {
return 403;
}
'';
krebs.tinc_graphs = { krebs.tinc_graphs = {
enable = true; enable = true;
nginx = { nginx = {