Add trusted-networks option
This commit is contained in:
parent
47c1ed966c
commit
8b2845a1b2
|
@ -41,12 +41,18 @@ in {
|
||||||
default = [ ];
|
default = [ ];
|
||||||
};
|
};
|
||||||
|
|
||||||
metricsPort = mkOption {
|
metrics-port = mkOption {
|
||||||
type = port;
|
type = port;
|
||||||
description = "Port on which to serve metrics.";
|
description = "Port on which to serve metrics.";
|
||||||
default = metricsPort;
|
default = metricsPort;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
trusted-networks = mkOption {
|
||||||
|
type = listOf str;
|
||||||
|
description = "List of networks to be considered trusted.";
|
||||||
|
default = [ ];
|
||||||
|
};
|
||||||
|
|
||||||
ldap = {
|
ldap = {
|
||||||
authentik-host = mkOption {
|
authentik-host = mkOption {
|
||||||
type = str;
|
type = str;
|
||||||
|
@ -401,7 +407,7 @@ in {
|
||||||
metrics-proxy = {
|
metrics-proxy = {
|
||||||
service = {
|
service = {
|
||||||
networks = [ "internal_network" ];
|
networks = [ "internal_network" ];
|
||||||
ports = [ "${toString cfg.metricsPort}:80" ];
|
ports = [ "${toString cfg.metrics-port}:80" ];
|
||||||
};
|
};
|
||||||
nixos = {
|
nixos = {
|
||||||
useSystemd = true;
|
useSystemd = true;
|
||||||
|
|
Loading…
Reference in New Issue