danlin/infra-nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Gitea container configuration and update firewall rules for access

Browse Source
This commit is contained in:
Daniel Lindenfelser
2025-12-15 09:46:14 +01:00
parent b92ccc8360
commit cdf71a5ded
2 changed files with 49 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/fileserver.nix
+24 -1
View File
@@ -134,6 +134,9 @@
"d /data/daten 0775 danlin users -"
"d /data/daten/share 0775 danlin users -"
# Gitea (runs as git user inside container, uid 1000)
"d /data/gitea 0755 root root -"
# DJ-Struktur
"d /data/daten/DJing 0775 danlin users -"
"d /data/daten/DJing/Music 0775 danlin users -"
@@ -166,6 +169,26 @@
};
};
virtualisation.oci-containers.containers.gitea = {
image = "gitea/gitea:1.25";
autoStart = true;
ports = [ "3000:3000" "2222:2222" ];
volumes = [
"/data/gitea:/data"
];
environment = {
USER_UID = "1000";
USER_GID = "1000";
TZ = "Europe/Berlin";
GITEA__server__DOMAIN = "git.home.lindenfelser.de";
GITEA__server__ROOT_URL = "https://git.home.lindenfelser.de/";
GITEA__server__SSH_DOMAIN = "git.home.lindenfelser.de";
GITEA__server__SSH_PORT = "2222";
GITEA__server__SSH_LISTEN_PORT = "2222";
GITEA__server__START_SSH_SERVER = "true";
};
};
virtualisation.oci-containers.containers.dj-beets-cli = {
image = "dj-beets:latest";
autoStart = false; # Run manually or via systemd service
@@ -317,6 +340,6 @@
########################################
networking.firewall.enable = true;
networking.firewall.allowedTCPPorts = [ 22 139 445 8080 8337 5357 ]; # 5357 WSD
networking.firewall.allowedTCPPorts = [ 22 139 445 8080 8337 5357 3000 2222 ]; # 5357 WSD
networking.firewall.allowedUDPPorts = [ 137 138 3702 5353 ]; # NetBIOS + WSD (3702) + mDNS (5353)
}