cluster/services/forge: use separate domain for ssh access

This commit is contained in:
Max Headroom 2024-07-17 00:48:01 +02:00
parent d77b511442
commit 0888ecce1a
2 changed files with 5 additions and 0 deletions

View file

@ -30,4 +30,8 @@
address = "https://forge.${depot.lib.meta.domain}/api/v1/version"; address = "https://forge.${depot.lib.meta.domain}/api/v1/version";
module = "https2xx"; module = "https2xx";
}; };
dns.records."ssh.forge".target = map
(node: depot.hours.${node}.interfaces.primary.addrPublic)
config.services.forge.nodes.server;
} }

View file

@ -51,6 +51,7 @@ in
PROTOCOL = link.protocol; PROTOCOL = link.protocol;
HTTP_ADDR = link.ipv4; HTTP_ADDR = link.ipv4;
HTTP_PORT = link.port; HTTP_PORT = link.port;
SSH_DOMAIN = "ssh.${host}";
}; };
oauth2_client = { oauth2_client = {
REGISTER_EMAIL_CONFIRM = false; REGISTER_EMAIL_CONFIRM = false;