ildkule/journald-remote: fix ListenStream
All checks were successful
Build topology graph / evals (push) Successful in 4m7s
Eval nix flake / evals (push) Successful in 7m0s

This commit is contained in:
2026-01-15 17:54:39 +09:00
parent 1c021cd789
commit a9e55b3185

View File

@@ -33,20 +33,27 @@ in
networking.firewall.allowedTCPPorts = [ cfg.port ];
systemd.sockets."systemd-journal-remote".socketConfig = {
IPAddressDeny = "any";
IPAddressAllow = [
"127.0.0.1"
"::1"
values.ipv4-space
values.ipv6-space
systemd.sockets."systemd-journal-remote" = {
listenStreams = lib.mkForce [
""
"0.0.0.0:${toString cfg.port}"
"[::0]:${toString cfg.port}"
];
socketConfig = {
IPAddressDeny = "any";
IPAddressAllow = [
"127.0.0.1"
"::1"
values.ipv4-space
values.ipv6-space
];
LoadCredential = let
inherit (config.security.acme.certs.${domainName}) directory;
in [
"key.pem:${directory}/key.pem"
"cert.pem:${directory}/cert.pem"
];
LoadCredential = let
inherit (config.security.acme.certs.${domainName}) directory;
in [
"key.pem:${directory}/key.pem"
"cert.pem:${directory}/cert.pem"
];
};
};
}