diff options
| author | Grisha Shipunov | 2026-07-26 16:15:35 +0000 |
|---|---|---|
| committer | Grisha Shipunov | 2026-07-26 20:19:26 +0000 |
| commit | fa816e580c3bcc70f0b58d2991ed65d919fbc05e (patch) | |
| tree | e6ef36148c8488d81df4742fd24a5e93d2291a53 /hosts/cloud/proxy/git.nix | |
| parent | 08d7de681a1cdd9d4e3eb1dff4a3bbf5af880a9d (diff) | |
cgit: init
Diffstat (limited to 'hosts/cloud/proxy/git.nix')
| -rw-r--r-- | hosts/cloud/proxy/git.nix | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/hosts/cloud/proxy/git.nix b/hosts/cloud/proxy/git.nix index 6b4a895..0a6a753 100644 --- a/hosts/cloud/proxy/git.nix +++ b/hosts/cloud/proxy/git.nix @@ -1,4 +1,9 @@ -{ ... }: +{ lib, ... }: +let + cgit = "10.89.88.19"; + cgit6 = "fd31:185d:722f::19"; + gitport = 8080; +in { # ssh config for forgejo # need ip forward for nat @@ -12,11 +17,11 @@ # git.oxapentane.com: port forward 22 to forgejo # TODO do a proper thing with ipv6 extraCommands = '' - iptables -t nat -I PREROUTING -p tcp --dport 22 -d 116.202.5.66 -j DNAT --to-destination 10.89.88.15:2222 + iptables -t nat -I PREROUTING -p tcp --dport 22 -d 116.202.5.66 -j DNAT --to-destination ${cgit}:22 iptables ! -o lo -t nat -A POSTROUTING -j MASQUERADE ''; extraStopCommands = '' - iptables -t nat -D PREROUTING -p tcp --dport 22 -d 116.202.5.66 -j DNAT --to-destination 10.89.88.15:2222 || true + iptables -t nat -D PREROUTING -p tcp --dport 22 -d 116.202.5.66 -j DNAT --to-destination ${cgit}:22 || true ''; }; # host sshd: only listen on oxapentane.com and mgmt vpn @@ -36,6 +41,6 @@ ]; services.caddy.virtualHosts."git.oxapentane.com".extraConfig = '' - respond "Temporary unavailable due to maintenance" 503 + reverse_proxy ${cgit}:${lib.toString gitport} ''; } |