diff --git a/hosts/leon/default.nix b/hosts/leon/default.nix index 7152b0ae..bfe010d2 100644 --- a/hosts/leon/default.nix +++ b/hosts/leon/default.nix @@ -216,5 +216,23 @@ networking.wireguard.interfaces = { #-----------------------------END-VPN--------------------------------- + +#-----------------------------ngin-X-------------------------------- + +# services.nginx = { +# listen 80; +# enable = true; +# virtualHosts."bicospacetech.c3d2.de" = { +# default = true; +# forceSSL = true; +# enableACME = true; +# locations."/login" = { +# proxyPass = "http://10.10.11.1:80"; +# proxyWebsockets = true; +# }; +# }; + +#-----------------------------ngin-X-------------------------------- + system.stateVersion = "22.05"; } diff --git a/hosts/leoncloud/default.nix b/hosts/leoncloud/default.nix index 526f2910..6790d95d 100644 --- a/hosts/leoncloud/default.nix +++ b/hosts/leoncloud/default.nix @@ -54,6 +54,11 @@ ]; }; + +# enable IP routing + boot.kernel.sysctl."net.ipv4.conf.all.forwarding" = 1; + boot.kernel.sysctl."net.ipv4.conf.default.forwarding" = 1; + networking.firewall = { allowedTCPPorts = [ 80 443 22 53 14000 14500 15000 ]; allowedUDPPorts = [ 18900 53 ]; @@ -97,7 +102,7 @@ services.nextcloud = { dbname = "nextcloud"; adminpassFile = "/etc/nixos/next-cloud/pass"; adminuser = "root"; - extraTrustedDomains = [ "172.20.79.254" "10.10.11.4" ]; + extraTrustedDomains = [ "172.20.79.254" "10.10.11.4" "10.10.11.1" ]; }; };