use network bridge to make sure container access to intenet

This commit is contained in:
ulic-youthlic 2025-03-06 00:50:29 +08:00
parent c84f295940
commit 7871e788aa
Signed by: youthlic
GPG key ID: 63E86C3C14A0D721
7 changed files with 51 additions and 41 deletions

View file

@ -20,6 +20,7 @@
hostName = "Cape";
};
users.deploy.enable = true;
containers.interface = "ens3";
programs = {
transfer-sh.enable = true;
rustypaste = {

View file

@ -5,13 +5,12 @@
domain = "forgejo.youthlic.fun";
sshPort = 2222;
httpPort = 8480;
interface = "ens3";
};
networking.firewall.allowedTCPPorts = [ 2222 ];
services.caddy.virtualHosts = {
"forgejo.${config.youthlic.programs.caddy.baseDomain}" = {
extraConfig = ''
reverse_proxy 10.231.136.102:8480
reverse_proxy 192.168.111.101:8480
'';
};
};

View file

@ -4,13 +4,12 @@
};
youthlic.containers.miniflux = {
enable = true;
interface = "ens3";
adminCredentialsFile = config.sops.secrets."miniflux".path;
};
services.caddy.virtualHosts = {
"miniflux.${config.youthlic.programs.caddy.baseDomain}" = {
extraConfig = ''
reverse_proxy 10.231.137.102:8485
reverse_proxy 192.168.111.102:8485
'';
};
};