DerGrumpf/cyper-nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Swapped volatile Tailscale ips for fixed wireguard ips

Browse Source
This commit is contained in:
DerGrumpf
2026-06-29 11:29:17 +02:00
parent cbfb1fef0e
commit a24e82bf5a
8 changed files with 13 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/roles/matrix/postgres-backup.nix
+2 -2
View File
@@ -50,7 +50,7 @@
--network host \
postgres:17 \
pg_basebackup \
--host=100.109.10.91 \
--host=10.10.0.1 \
--port=5432 \
--username=replicator \
--pgdata=/out/postgresql-replica \
@@ -64,7 +64,7 @@
# primary conninfo
cat > "$DATADIR/postgresql.auto.conf" <<EOF
primary_conninfo = 'host=100.109.10.91 port=5432 user=replicator password=$PG_PASS application_name=cyper-controller sslmode=disable'
primary_conninfo = 'host=10.10.0.1 port=5432 user=replicator password=$PG_PASS application_name=cyper-controller sslmode=disable'
EOF
# minimal postgresql.conf
nixos/roles/matrix/synapse.nix
+2 -2
View File
@@ -149,7 +149,7 @@ in
type = "metrics";
bind_addresses = [
"127.0.0.1"
"100.109.10.91"
"10.10.0.1"
];
resources = [ ];
}
@@ -250,7 +250,7 @@ in
wal_level = "replica";
max_wal_senders = 5;
wal_keep_size = "512MB";
listen_addresses = lib.mkForce "127.0.0.1,100.109.10.91";
listen_addresses = lib.mkForce "127.0.0.1,10.10.0.1";
ssl = true;
};
authentication = lib.mkAfter ''
nixos/roles/monitoring.nix
+2 -2
View File
@@ -134,7 +134,7 @@ in
metrics_path = "/_synapse/metrics";
static_configs = [
{
targets = [ "100.109.10.91:9009" ];
targets = [ "10.10.0.1:9009" ];
labels = {
instance = "cyper-proxy";
job = "master";
@@ -158,7 +158,7 @@ in
job_name = "postgresql-proxy";
static_configs = [
{
targets = [ "100.109.10.91:9188" ];
targets = [ "10.10.0.1:9188" ];
labels = {
instance = "cyper-proxy";
};
nixos/roles/nginx.nix
+1 -1
View File
@@ -1,6 +1,6 @@
_:
let
upstream = "100.109.179.25";
upstream = "10.10.0.2";
mkProxy = port: {
forceSSL = true;
nixos/roles/paperless-ngx.nix
+2 -2
View File
@@ -22,10 +22,10 @@
settings = {
PAPERLESS_USE_X_FORWARDED_HOST = true;
PAPERLESS_USE_X_FORWARDED_PORT = true;
PAPERLESS_ALLOWED_HOSTS = "ngx.cyperpunk.de,100.109.179.25,localhost";
PAPERLESS_ALLOWED_HOSTS = "ngx.cyperpunk.de,10.10.0.2,localhost";
PAPERLESS_CSRF_TRUSTED_ORIGINS = [
"https://ngx.cyperpunk.de"
"http://100.109.179.25:28101"
"http://10.10.0.2:28101"
];
PAPERLESS_OCR_LANGUAGE = "deu+eng";
PAPERLESS_CONSUMER_POLLING = 60;