summary refs log tree commit diff
path: root/services/shiori.nix
diff options
context:
space:
mode:
authorMel <mel@rnrd.eu>2025-02-12 22:54:17 +0100
committerMel <mel@rnrd.eu>2025-02-12 22:54:17 +0100
commit0db876e1688da709ad2ed62a2fb96b274615f2c4 (patch)
treed22990741f2ef6d9d2c4c0596b65855a3862b6f3 /services/shiori.nix
parent9c2bb082279a9b68d2df4bd8a5805c27c34a5c5a (diff)
downloadnetwork-0db876e1688da709ad2ed62a2fb96b274615f2c4.tar.zst
network-0db876e1688da709ad2ed62a2fb96b274615f2c4.zip
Listen only on tailnet address for new internal rnrd.fyi sites
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'services/shiori.nix')
-rw-r--r--services/shiori.nix3
1 files changed, 2 insertions, 1 deletions
diff --git a/services/shiori.nix b/services/shiori.nix
index c580577..f7943ed 100644
--- a/services/shiori.nix
+++ b/services/shiori.nix
@@ -1,4 +1,4 @@
-{ pkgs, auxiliaryPkgs, ... }:
+{ me, pkgs, auxiliaryPkgs, ... }:
 
 let
   inherit (pkgs) dockerTools;
@@ -49,6 +49,7 @@ in
   services.nginx.virtualHosts."shiori.rnrd.fyi" = {
     useACMEHost = "rnrd.fyi";
     forceSSL = true;
+    listenAddresses = [ me.tailscale.ip ];
     locations."/" = {
       proxyPass = "http://127.0.0.1:${toString shioriLocalPort}/";
     };