alarsyo/nixos-config
alarsyo/nixos-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

services: transmission: only expose over Wireguard

Browse source
This commit is contained in:
Antoine Martin 2022-03-20 23:01:32 +01:00
parent 8c21d60d8c
commit 2644c71aa8
5 changed files with 18 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

21
services/transmission.nix
View file

@ -49,12 +49,13 @@ in
rpc-enabled = true;
rpc-port = transmissionRpcPort;
rpc-authentication-required = true;
rpc-username = cfg.username;
rpc-authentication-required = false;
rpc-whitelist-enabled = true;
rpc-whitelist = "127.0.0.1";
rpc-host-whitelist-enabled = true;
rpc-host-whitelist = webuiDomain;
};
# automatically allow transmission.settings.peer-port
@ -68,6 +69,20 @@ in
useACMEHost = domain;
locations."/".proxyPass = "http://127.0.0.1:${toString transmissionRpcPort}";
listen = [
# FIXME: hardcoded tailscale IP
{
addr = "100.80.61.67";
port = 443;
ssl = true;
}
{
addr = "100.80.61.67";
port = 80;
ssl = false;
}
];
};
};
}