No reason to put the HTTPS proxy on a public port
This commit is contained in:
parent
76c0d49053
commit
248df221d8
@ -10,7 +10,7 @@ let
|
|||||||
domain-name = host-config.domain;
|
domain-name = host-config.domain;
|
||||||
domain = config.fudo.domains.${domain-name};
|
domain = config.fudo.domains.${domain-name};
|
||||||
|
|
||||||
dns-proxy-port = 5335;
|
dns-proxy-port = 5335
|
||||||
|
|
||||||
in {
|
in {
|
||||||
config = {
|
config = {
|
||||||
@ -81,7 +81,7 @@ in {
|
|||||||
bootstrap-dns = "1.1.1.1";
|
bootstrap-dns = "1.1.1.1";
|
||||||
allowed-networks =
|
allowed-networks =
|
||||||
[ "1.1.1.1/32" "1.0.0.1/32" "10.0.0.0/16" "localhost" "link-local" ];
|
[ "1.1.1.1/32" "1.0.0.1/32" "10.0.0.0/16" "localhost" "link-local" ];
|
||||||
listen-ips = [ primary-ip ];
|
listen-ips = [ "127.0.0.1" ];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
@ -102,7 +102,7 @@ in {
|
|||||||
environment = {
|
environment = {
|
||||||
# ServerIP = primary-ip;
|
# ServerIP = primary-ip;
|
||||||
VIRTUAL_HOST = "dns-hole.sea.fudo.org";
|
VIRTUAL_HOST = "dns-hole.sea.fudo.org";
|
||||||
DNS1 = "${primary-ip}#${toString dns-proxy-port}";
|
DNS1 = "127.0.0.1#${toString dns-proxy-port}";
|
||||||
};
|
};
|
||||||
volumes = [
|
volumes = [
|
||||||
"/state/pihole/etc-pihole/:/etc/pihole/"
|
"/state/pihole/etc-pihole/:/etc/pihole/"
|
||||||
|
Loading…
Reference in New Issue
Block a user