dev/nixfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

nixos/git: Fix container network access
Some checks failed
CI / Check, build and cache Nix flake (push) Failing after 1m46s
Details

Browse Source
This commit is contained in:
Jack O'Sullivan 2023-12-09 17:19:18 +00:00
parent 54f628d3a5
commit 22cdbd47fd
2 changed files with 27 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
nixos/boxes/colony/vms/git/default.nix
View File

@ -84,6 +84,7 @@ in
oci-containers = { oci-containers = {
backend = "podman"; backend = "podman";
}; };
containers.containersConf.settings.network.default_subnet = "10.88.0.0/16";
}; };
systemd.network = { systemd.network = {
@ -108,7 +109,13 @@ in
firewall = { firewall = {
tcp.allowed = [ 19999 ]; tcp.allowed = [ 19999 ];
trustedInterfaces = [ "oci" ]; extraRules = ''
table inet filter {
chain forward {
ip saddr 10.88.0.0/16 accept
}
}
'';
}; };
}; };
} }

8
nixos/boxes/colony/vms/git/gitea.nix
View File

@ -1,5 +1,6 @@
{ lib, pkgs, config, assignments, allAssignments, ... }: { lib, pkgs, config, assignments, allAssignments, ... }:
let let
inherit (lib) mkMerge;
inherit (lib.my.c) pubDomain; inherit (lib.my.c) pubDomain;
inherit (lib.my.c.colony) prefixes; inherit (lib.my.c.colony) prefixes;
in in
@ -37,7 +38,10 @@ in
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
}; };
gitea.preStart = gitea = mkMerge [
(lib.my.systemdAwaitPostgres pkgs.postgresql "colony-psql")
{
preStart =
let let
repSec = "${pkgs.replace-secret}/bin/replace-secret"; repSec = "${pkgs.replace-secret}/bin/replace-secret";
confPath = "${config.services.gitea.customDir}/conf/app.ini"; confPath = "${config.services.gitea.customDir}/conf/app.ini";
@ -51,6 +55,8 @@ in
(umask 027; gitea_extra_setup) (umask 027; gitea_extra_setup)
''; '';
}
];
}; };
}; };