alarsyo/nixos-config
alarsyo/nixos-config
1
1
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

services: paperless: restrict to Tailscale

Browse source
This commit is contained in:
Antoine Martin 2021-07-13 01:14:01 +02:00
parent f0e5e90c10
commit 8eb1fe5001
1 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
services/paperless.nix
View file

@ -25,6 +25,20 @@ in
forceSSL = true; forceSSL = true;
useACMEHost = domain; useACMEHost = domain;
listen = [
# FIXME: hardcoded tailscale IP
{
addr = "100.80.61.67";
port = 443;
ssl = true;
}
{
addr = "100.80.61.67";
port = 80;
ssl = false;
}
];
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:${toString cfg.port}"; proxyPass = "http://127.0.0.1:${toString cfg.port}";
proxyWebsockets = true; proxyWebsockets = true;