fix: ipv6 setup and reverse proxy
This commit is contained in:
1 parent
d517a3c4e9
commit
d505d13d9a
1 file changed
+14
@@ -16,6 +16,15 @@
|
|||||||
domain.enable = false;
|
domain.enable = false;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# Let the kernel handle router advertisements, so the route to the
|
||||||
|
# Thread network advertised by the OTBR gets installed
|
||||||
|
networking.dhcpcd.IPv6rs = false;
|
||||||
|
boot.kernel.sysctl = {
|
||||||
|
"net.ipv6.conf.default.accept_ra_rt_info_max_plen" = 64;
|
||||||
|
"net.ipv6.conf.eno1.accept_ra" = 1;
|
||||||
|
"net.ipv6.conf.eno1.accept_ra_rt_info_max_plen" = 64;
|
||||||
|
};
|
||||||
|
|
||||||
# Matter controller
|
# Matter controller
|
||||||
services.matterjs-server = {
|
services.matterjs-server = {
|
||||||
enable = true;
|
enable = true;
|
||||||
@@ -44,6 +53,11 @@
|
|||||||
extraComponents = [ "matter" ];
|
extraComponents = [ "matter" ];
|
||||||
config = {
|
config = {
|
||||||
homeassistant = { };
|
homeassistant = { };
|
||||||
|
http = {
|
||||||
|
use_x_forwarded_for = true;
|
||||||
|
# TODO: Narrow down to the address the internal gateway connects from
|
||||||
|
trusted_proxies = [ "10.10.0.0/16" ];
|
||||||
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
networking.firewall.allowedTCPPorts = [
|
networking.firewall.allowedTCPPorts = [
|
||||||
|
|||||||
Reference in new issue
Block a user