mirror of
https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git
synced 2026-01-19 17:39:15 +01:00
ildkule/journald-remote: move LoadCredential to correct unit
This commit is contained in:
@@ -31,9 +31,8 @@ in
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
networking.firewall.allowedTCPPorts = [ cfg.port ];
|
systemd.sockets."systemd-journal-remote" = {
|
||||||
|
socketConfig = {
|
||||||
systemd.sockets."systemd-journal-remote".socketConfig = {
|
|
||||||
IPAddressDeny = "any";
|
IPAddressDeny = "any";
|
||||||
IPAddressAllow = [
|
IPAddressAllow = [
|
||||||
"127.0.0.1"
|
"127.0.0.1"
|
||||||
@@ -41,7 +40,13 @@ in
|
|||||||
values.ipv4-space
|
values.ipv4-space
|
||||||
values.ipv6-space
|
values.ipv6-space
|
||||||
];
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
networking.firewall.allowedTCPPorts = [ cfg.port ];
|
||||||
|
|
||||||
|
systemd.services."systemd-journal-remote" = {
|
||||||
|
socketConfig = {
|
||||||
LoadCredential = let
|
LoadCredential = let
|
||||||
inherit (config.security.acme.certs.${domainName}) directory;
|
inherit (config.security.acme.certs.${domainName}) directory;
|
||||||
in [
|
in [
|
||||||
@@ -49,4 +54,5 @@ in
|
|||||||
"cert.pem:${directory}/cert.pem"
|
"cert.pem:${directory}/cert.pem"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user