services: immich: listen through tailscale only

This commit is contained in:
Antoine Martin 2023-12-16 14:17:20 +01:00
parent 37df6b7a66
commit cf545bdb3c

View file

@ -51,6 +51,20 @@ in {
forceSSL = true;
useACMEHost = fqdn;
listen = [
# FIXME: hardcoded tailscale IP
{
addr = "100.115.172.44";
port = 443;
ssl = true;
}
{
addr = "100.115.172.44";
port = 80;
ssl = false;
}
];
locations."/" = {
proxyPass = "http://127.0.0.1:${toString cfg.port}";
proxyWebsockets = true;