rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Harden deployment, authentication, firewall and media storage failure paths

Browse source
This commit is contained in:
rope 2026-09-14 11:50:22 +01:00
parent 64ede7bd05
commit 7145a35927
35 changed files with 2529 additions and 499 deletions
Download patch file Download diff file Expand all files Collapse all files

5
services/pelican.nix
View file

@ -122,8 +122,9 @@
ports = [
# Daemon API + console websocket — nginx fronts it as games.nordhammer.it.
"127.0.0.1:8443:8080"
# SFTP into server files. LAN-reachable; not in ports.toml, so no WAN.
"2022:2022"
# SFTP into server files. Bind LAN explicitly; router.nix also denies
# new WAN connections outside the ports.toml allowlist after Docker NAT.
"10.0.0.1:2022:2022"
];
environment.TZ = "Europe/Stockholm";
# Image is distroless with no entrypoint script — needs a tty allocated.