titaniumtown/server-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

expand vpnNamespaceOpenPort

Browse Source
This commit is contained in:
Simon Gardling 2025-08-20 12:33:27 -04:00
parent 87a5466411
commit a827438a4c
Signed by: titaniumtown
GPG Key ID: 9AB28AC10ECE533D
3 changed files with 7 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib.nix
View File

@ -55,7 +55,7 @@ inputs.nixpkgs.lib.extend (
];
vpnNamespaceOpenPort =
port:
port: service:
{ ... }:
{
vpnNamespaces.wg = {
@ -73,6 +73,10 @@ inputs.nixpkgs.lib.extend (
}
];
};
systemd.services.${service}.vpnConfinement = {
enable = true;
vpnNamespace = "wg";
};
};
}
)

7
services/bitmagnet.nix
View File

@ -7,7 +7,7 @@
}:
{
imports = [
(lib.vpnNamespaceOpenPort service_configs.ports.bitmagnet)
(lib.vpnNamespaceOpenPort service_configs.ports.bitmagnet "bitmagnet")
];
services.bitmagnet = {
@ -28,9 +28,4 @@
${builtins.readFile ../secrets/caddy_auth}
reverse_proxy ${service_configs.https.wg_ip}:${builtins.toString service_configs.ports.bitmagnet}
'';
systemd.services.bitmagnet.vpnConfinement = {
enable = true;
vpnNamespace = "wg";
};
}

8
services/qbittorrent.nix
View File

@ -13,7 +13,7 @@
config.services.qbittorrent.serverConfig.Preferences.Downloads.TempPath
"${config.services.qbittorrent.profileDir}/qBittorrent"
])
(lib.vpnNamespaceOpenPort config.services.qbittorrent.webuiPort)
(lib.vpnNamespaceOpenPort config.services.qbittorrent.webuiPort "qbittorrent")
];
services.qbittorrent = {
@ -203,12 +203,6 @@
"d ${config.services.qbittorrent.profileDir} 0700 ${config.services.qbittorrent.user} ${config.services.qbittorrent.group}"
];
# make qbittorrent use a vpn
systemd.services.qbittorrent.vpnConfinement = {
enable = true;
vpnNamespace = "wg";
};
services.caddy.virtualHosts."torrent.${service_configs.https.domain}".extraConfig = ''
${builtins.readFile ../secrets/caddy_auth}
reverse_proxy ${service_configs.https.wg_ip}:${builtins.toString config.services.qbittorrent.webuiPort}