Add trusted-networks option

This commit is contained in:
niten 2023-09-24 23:13:58 -07:00
parent 47c1ed966c
commit 8b2845a1b2
1 changed files with 8 additions and 2 deletions

View File

@ -41,12 +41,18 @@ in {
default = [ ]; default = [ ];
}; };
metricsPort = mkOption { metrics-port = mkOption {
type = port; type = port;
description = "Port on which to serve metrics."; description = "Port on which to serve metrics.";
default = metricsPort; default = metricsPort;
}; };
trusted-networks = mkOption {
type = listOf str;
description = "List of networks to be considered trusted.";
default = [ ];
};
ldap = { ldap = {
authentik-host = mkOption { authentik-host = mkOption {
type = str; type = str;
@ -401,7 +407,7 @@ in {
metrics-proxy = { metrics-proxy = {
service = { service = {
networks = [ "internal_network" ]; networks = [ "internal_network" ];
ports = [ "${toString cfg.metricsPort}:80" ]; ports = [ "${toString cfg.metrics-port}:80" ];
}; };
nixos = { nixos = {
useSystemd = true; useSystemd = true;