infrastructure

commit 2e17a2ed4ac0758ede73c64492aa5cc6e8c328b4
parent ec975477199053f8e6047c236d39f67f45765e83
Author: Silas Brack <silasbrack@gmail.com>
Date:   Sat, 13 Jun 2026 14:26:37 +0200

fix: restore 0.0.0.0:9090 logs vhost with wg0 firewall rule

This was working all along — the debugging issues were caused by
using the wrong VPN IP (10.100.0.1 vs 10.100.0.7).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Diffstat:
M
modules/simple-web-app.nix
 | 
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/modules/simple-web-app.nix b/modules/simple-web-app.nix
@@ -66,7 +66,7 @@ in
     };
 
 
-    # Serve logs — open on all interfaces, firewall restricts to VPN
+    # Serve logs — firewall restricts to VPN (wg0) only
     networking.firewall.interfaces."wg0".allowedTCPPorts = [ 9090 ];
     services.nginx.virtualHosts."simple-web-app-logs" = {
       listen = [{ addr = "0.0.0.0"; port = 9090; }];