No reason to put the HTTPS proxy on a public port

This commit is contained in:
niten 2021-10-13 08:34:48 -07:00
parent 76c0d49053
commit 248df221d8

View File

@ -10,7 +10,7 @@ let
domain-name = host-config.domain; domain-name = host-config.domain;
domain = config.fudo.domains.${domain-name}; domain = config.fudo.domains.${domain-name};
dns-proxy-port = 5335; dns-proxy-port = 5335
in { in {
config = { config = {
@ -81,7 +81,7 @@ in {
bootstrap-dns = "1.1.1.1"; bootstrap-dns = "1.1.1.1";
allowed-networks = allowed-networks =
[ "1.1.1.1/32" "1.0.0.1/32" "10.0.0.0/16" "localhost" "link-local" ]; [ "1.1.1.1/32" "1.0.0.1/32" "10.0.0.0/16" "localhost" "link-local" ];
listen-ips = [ primary-ip ]; listen-ips = [ "127.0.0.1" ];
}; };
}; };
@ -102,7 +102,7 @@ in {
environment = { environment = {
# ServerIP = primary-ip; # ServerIP = primary-ip;
VIRTUAL_HOST = "dns-hole.sea.fudo.org"; VIRTUAL_HOST = "dns-hole.sea.fudo.org";
DNS1 = "${primary-ip}#${toString dns-proxy-port}"; DNS1 = "127.0.0.1#${toString dns-proxy-port}";
}; };
volumes = [ volumes = [
"/state/pihole/etc-pihole/:/etc/pihole/" "/state/pihole/etc-pihole/:/etc/pihole/"