all repos — nixfiles @ 1a6c6136839c16aee0e5db3211e89e5d28c7e149

System and user configuration, managed by nix and home-manager

linde: bind redis and caddy to all interfaces

Alan Pearce
commit

1a6c6136839c16aee0e5db3211e89e5d28c7e149

parent

d9dc58d306151dd89c423331f45b1435eb74e4a6

1 file changed, 3 insertions(+), 7 deletions(-)

jump to
M system/linde.nix → system/linde.nix
@@ -12,7 +12,6 @@ net-ip4 = "116.203.248.56";
   net-mask4 = 32;
   net-gw = "172.31.1.1";
   net-ip6 = "2a01:4f8:c012:23a4::1";
-  net-redisip = "2a01:4f8:c012:23a4::6379";
   net-mask6 = 64;
   net-gw6 = "fe80::1";
   domain = "alanpearce.eu";

@@ -154,9 +153,8 @@ "1.1.1.1"
       "1.0.0.1"
     ];
     hosts = lib.mkForce {
-      ${net-ip4} = [ "${hostname}.${domain}" hostname ];
-      ${net-ip6} = [ "${hostname}.${domain}" hostname ];
-      ${net-redisip} = [ "redis" ];
+      ${net-ip4} = [ "${hostname}.${domain}" hostname "redis" ];
+      ${net-ip6} = [ "${hostname}.${domain}" hostname "redis" ];
     };
     defaultGateway = {
       address = net-gw;

@@ -178,7 +176,6 @@ };
       ipv6 = {
         addresses = [
           { address = net-ip6; prefixLength = net-mask6; }
-          { address = net-redisip; prefixLength = net-mask6; }
         ];
       };
     };

@@ -499,7 +496,6 @@ enable = true;
     group = "caddy";
     globalConfig = ''
       auto_https disable_certs
-      default_bind ${net-ip6} ${net-ip4}
     '';
     virtualHosts =
       let

@@ -854,7 +850,7 @@ servers = {
       website = {
         enable = true;
         port = 0;
-        bind = net-redisip;
+        bind = null;
         databases = 1;
         maxclients = 20;
         requirePassFile = config.age.secrets.redis-website.path;