{georg,brzeczyszczykiewicz}: use sane IPv6 addresses

kommode/gitea: only allow webhooks to external hosts
We don't have any servers with intranet IPs, and we want webhooks that hook back to kommode to pass through its firewall.
2026-07-04 09:51:47 +02:00 · 2026-05-29 16:04:52 +09:00 · 2026-05-29 12:58:26 +09:00
2 changed files with 5 additions and 2 deletions
@@ -139,6 +139,9 @@ in {
        AVATAR_MAX_ORIGIN_SIZE = 1024 * 1024 * 2;
      };
      actions.ENABLED = true;
+      webhook.ALLOWED_HOST_LIST = lib.concatStringsSep "," [
+        "external"
+      ];
    };

    dump = {
@@ -55,11 +55,11 @@ in rec {
    };
    brzeczyszczykiewicz = {
      ipv4 = pvv-ipv4 205;
-      ipv6 = pvv-ipv6 "1:50"; # Wtf peder why
+      ipv6 = pvv-ipv6 205;
    };
    georg = {
      ipv4 = pvv-ipv4 204;
-      ipv6 = pvv-ipv6 "1:4f"; # Wtf øystein og daniel why
+      ipv6 = pvv-ipv6 204;
    };
    kommode = {
      ipv4 = pvv-ipv4 223;
Author	SHA1	Message	Date
h7x4	e05eab4ddf	{georg,brzeczyszczykiewicz}: use sane IPv6 addresses	2026-05-29 16:04:52 +09:00
h7x4	64843087be	kommode/gitea: only allow webhooks to external hosts We don't have any servers with intranet IPs, and we want webhooks that hook back to kommode to pass through its firewall.	2026-05-29 12:58:26 +09:00