felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-01-19 09:29:13 +01:00
Code Issues Projects Releases Wiki Activity

ildkule/journald-remote: move LoadCredential to correct unit

Browse Source
This commit is contained in:
h7x4
2026-01-15 18:37:44 +09:00
parent 1c021cd789
commit e72fb76fff
1 changed files with 21 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
hosts/ildkule/services/journald-remote.nix
View File

@@ -31,22 +31,28 @@ in
}; };
}; };
systemd.sockets."systemd-journal-remote" = {
socketConfig = {
IPAddressDeny = "any";
IPAddressAllow = [
"127.0.0.1"
"::1"
values.ipv4-space
values.ipv6-space
];
};
};
networking.firewall.allowedTCPPorts = [ cfg.port ]; networking.firewall.allowedTCPPorts = [ cfg.port ];
systemd.sockets."systemd-journal-remote".socketConfig = { systemd.services."systemd-journal-remote" = {
IPAddressDeny = "any"; socketConfig = {
IPAddressAllow = [ LoadCredential = let
"127.0.0.1" inherit (config.security.acme.certs.${domainName}) directory;
"::1" in [
values.ipv4-space "key.pem:${directory}/key.pem"
values.ipv6-space "cert.pem:${directory}/cert.pem"
]; ];
};
LoadCredential = let
inherit (config.security.acme.certs.${domainName}) directory;
in [
"key.pem:${directory}/key.pem"
"cert.pem:${directory}/cert.pem"
];
}; };
} }