block some services from forgejo

This commit is contained in:
Henry Hiles 2025-09-27 20:59:45 -04:00
commit 18eb50a602
No known key found for this signature in database
3 changed files with 16 additions and 4 deletions

View file

@ -10,11 +10,14 @@
networking.firewall.allowedTCPPorts = [ 443 ];
services.caddy = {
enable = true;
email = "hen" + "ry@he" + "nryhi" + "les.c" + "om";
email = "henry@henryhiles.com";
environmentFile = config.age.secrets."base64JwtSecret.age".path;
package = pkgs.caddy.withPlugins {
plugins = [ "github.com/ggicci/caddy-jwt@v1.1.0" ];
hash = "sha256-ZpPFPJwjIEpF7NpbfmeGvM3auM8W0KZU9GoCDKC0HQM=";
plugins = [
"github.com/ggicci/caddy-jwt@v1.1.0"
"pkg.jsn.cam/caddy-defender@v0.9.0"
];
hash = "sha256-DO4jgD7UWva6z2/pQT+4RfBfKoBAAZVCgjXC/unYCQk=";
};
virtualHosts = lib.mapAttrs (domain: host: {