Nico
7537a1e5b6
blocks ips not in tailnet or in local network from accessing services using `important block_non_private_ips` in their caddy config
20 lines
421 B
Nix
20 lines
421 B
Nix
{ config, ... }:
|
|
|
|
{
|
|
# Streaming frontend
|
|
services.jellyfin = {
|
|
enable = true;
|
|
openFirewall = false;
|
|
group = "media";
|
|
};
|
|
|
|
users.users.jellyfin.extraGroups = [ "render" "video" ];
|
|
|
|
services.caddy.virtualHosts."watch.${config.homelab.domain}" = {
|
|
# useACMEHost = config.homelab.domain;
|
|
extraConfig = ''
|
|
reverse_proxy http://localhost:8096
|
|
import block_non_private_ips
|
|
'';
|
|
};
|
|
}
|