RGBCube/ncc
1
Fork 0
mirror of https://github.com/RGBCube/ncc synced 2025-08-01 12:37:46 +00:00
Code Issues Activity

Fix exposed ports

Browse source
This commit is contained in:
RGBCube 2024-01-16 13:55:18 +03:00
parent 621812d645
commit cb4ca64bd7
No known key found for this signature in database
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/endlessh-go.nix
View file

@ -14,8 +14,12 @@ serverSystemConfiguration {
nixpkgs.config.allowUnfree = true; # For pkgs.clash-geoip. nixpkgs.config.allowUnfree = true; # For pkgs.clash-geoip.
# services.endlessh-go.openFirewall exposes both the Prometheus
# exporters port and the SSH port, and we don't want the metrics
# to leak, so we manually expose this like so.
networking.firewall.allowedTCPPorts = [ config.services.endlessh-go.port ];
services.endlessh-go = enabled { services.endlessh-go = enabled {
openFirewall = true;
port = 22; port = 22;
extraOptions = [ extraOptions = [