makefu/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

m 1 shoney: update to new tinc_stats api, reject external

Browse source
This commit is contained in:
makefu 2016-12-25 02:56:56 +01:00
parent 6b4f2995f4
commit e177454d68
1 changed files with 8 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
1systems/shoney.nix
View file

@ -21,7 +21,6 @@ in {
krebs = { krebs = {
enable = true; enable = true;
build.host = config.krebs.hosts.shoney; build.host = config.krebs.hosts.shoney;
nginx.enable = true;
tinc_graphs = { tinc_graphs = {
enable = true; enable = true;
network = "siem"; network = "siem";
@ -29,9 +28,15 @@ in {
nginx = { nginx = {
enable = true; enable = true;
# TODO: remove hard-coded hostname # TODO: remove hard-coded hostname
anonymous-domain = "localhost.localdomain";
anonymous.extraConfig = "return 403;";
complete = { complete = {
listen = [ "${tinc-siem-ip}:80" ]; serverAliases = [ "graphs.siem" ];
server-names = [ "graphs.siem" ]; extraConfig = ''
if ( $server_addr = "${ip}" ) {
return 403;
}
'';
}; };
}; };
}; };