lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ipfs: add to pomerium, explicitly set IPs for swarm

Browse source
This commit is contained in:
Luke Granger-Brown 2021-04-18 16:24:59 +00:00
parent 42e8b1eed0
commit 36cc88bcef
2 changed files with 26 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

34
ops/nixos/bvm-ipfs/default.nix
View file

@ -39,16 +39,30 @@
dataDir = "/store/ipfs";
extraConfig = {
Experimental.FilestoreEnabled = true;
Addresses.API = [
"/ip4/127.0.0.1/tcp/5001"
"/ip4/10.100.0.203/tcp/5001"
"/ip4/${config.my.ip.tailscale}/tcp/5001"
];
Addresses.Gateway = [
"/ip4/127.0.0.1/tcp/8080"
"/ip4/10.100.0.203/tcp/8080"
"/ip4/${config.my.ip.tailscale}/tcp/8080"
];
Addresses = let
internalv4 = ["127.0.0.1" "10.100.0.203" config.my.ip.tailscale];
internal = map (a: "/ip4/${a}") internalv4;
externalv4 = internalv4 ++ ["92.118.28.4"];
externalv6 = ["2a09:a441::4"];
external = (map (a: "/ip4/${a}") externalv4) ++ (map (a: "/ip6/${a}") externalv6);
in {
API = map (f: "${f}/tcp/5001") internal;
Gateway = map (f: "${f}/tcp/8080") internal;
Swarm = let
suffixes = ["/tcp/4001" "/udp/4001/quic"];
in builtins.concatMap (suffix: map (prefix: prefix + suffix) external) suffixes;
};
API.HTTPHeaders = {
Access-Control-Allow-Origin = [
"http://bvm-ipfs:5001"
"http://localhost:3000"
"http://127.0.0.1:5001"
"https://webui.ipfs.io"
"https://ipfs.int.lukegb.com"
];
Access-Control-Allow-Methods = ["PUT" "POST"];
};
};
};

2
ops/nixos/etheroute-lon01/default.nix
View file

@ -252,6 +252,8 @@ in {
"X-Forwarded-Roles" = "pomerium";
};
})
(service "bvm-ipfs:5001" "ipfs.int.lukegb.com" {})
(service "bvm-ipfs:8080" "ipfs-gw.int.lukegb.com" {})
];
};
};