No reason to put the HTTPS proxy on a public port
This commit is contained in:
parent
76c0d49053
commit
248df221d8
@ -10,7 +10,7 @@ let
|
||||
domain-name = host-config.domain;
|
||||
domain = config.fudo.domains.${domain-name};
|
||||
|
||||
dns-proxy-port = 5335;
|
||||
dns-proxy-port = 5335
|
||||
|
||||
in {
|
||||
config = {
|
||||
@ -81,7 +81,7 @@ in {
|
||||
bootstrap-dns = "1.1.1.1";
|
||||
allowed-networks =
|
||||
[ "1.1.1.1/32" "1.0.0.1/32" "10.0.0.0/16" "localhost" "link-local" ];
|
||||
listen-ips = [ primary-ip ];
|
||||
listen-ips = [ "127.0.0.1" ];
|
||||
};
|
||||
};
|
||||
|
||||
@ -102,7 +102,7 @@ in {
|
||||
environment = {
|
||||
# ServerIP = primary-ip;
|
||||
VIRTUAL_HOST = "dns-hole.sea.fudo.org";
|
||||
DNS1 = "${primary-ip}#${toString dns-proxy-port}";
|
||||
DNS1 = "127.0.0.1#${toString dns-proxy-port}";
|
||||
};
|
||||
volumes = [
|
||||
"/state/pihole/etc-pihole/:/etc/pihole/"
|
||||
|
Loading…
Reference in New Issue
Block a user