From cf545bdb3c7a8b14eb46b6d893ea7906dc9237e3 Mon Sep 17 00:00:00 2001
From: Antoine Martin <antoine@alarsyo.net>
Date: Sat, 16 Dec 2023 14:17:20 +0100
Subject: [PATCH] services: immich: listen through tailscale only

---
 services/immich.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/services/immich.nix b/services/immich.nix
index 507e48e..89e4721 100644
--- a/services/immich.nix
+++ b/services/immich.nix
@@ -51,6 +51,20 @@ in {
         forceSSL = true;
         useACMEHost = fqdn;
 
+        listen = [
+          # FIXME: hardcoded tailscale IP
+          {
+            addr = "100.115.172.44";
+            port = 443;
+            ssl = true;
+          }
+          {
+            addr = "100.115.172.44";
+            port = 80;
+            ssl = false;
+          }
+        ];
+
         locations."/" = {
           proxyPass = "http://127.0.0.1:${toString cfg.port}";
           proxyWebsockets = true;