container dns

rm dns
enable firewall
2025-08-04 16:47:17 +02:00 · 2025-08-04 16:47:17 +02:00 · 2025-08-04 16:47:17 +02:00 · 2025-08-04 16:47:17 +02:00 · 2025-08-04 16:47:17 +02:00 · 2025-08-04 16:47:17 +02:00
1 changed files with 1 additions and 2 deletions
--- a/machines/dev/fedi203/woodpecker.nix
+++ b/machines/dev/fedi203/woodpecker.nix
@ -202,6 +202,7 @@
  };

  networking = {
+    nftables.enable = lib.mkForce false;
    firewall = {
      enable = lib.mkForce true;
      allowedTCPPorts = [
@ -215,8 +216,6 @@
        allowedTCPPorts = [ 53 ];
      };
    };
-    # helps make sure DNS resolves from the containers
-    nftables.enable = lib.mkForce false;
  };

  virtualisation.podman = {
Author	SHA1	Message	Date
Kiara Grouwstra	2cb50a3113	container dns Some checks are pending ci/woodpecker/manual/cd Pipeline is pending Details ci/woodpecker/manual/check-data-model Pipeline is pending Details ci/woodpecker/manual/check-deployment-basic Pipeline is pending Details ci/woodpecker/manual/check-deployment-cli Pipeline is pending Details ci/woodpecker/manual/check-deployment-panel Pipeline is pending Details ci/woodpecker/manual/check-mastodon Pipeline is pending Details ci/woodpecker/manual/check-panel Pipeline is pending Details ci/woodpecker/manual/check-peertube Pipeline is pending Details ci/woodpecker/manual/check-pre-commit Pipeline is pending Details ci/woodpecker/manual/check-resources Pipeline is pending Details ci/woodpecker/manual/update Pipeline is pending Details rm dns	2025-08-04 16:47:17 +02:00
Kiara Grouwstra	b516228c03	enable firewall	2025-08-04 16:47:17 +02:00
Kiara Grouwstra	f25d503cc0	rm agent exec plug hole in firewall format	2025-08-04 16:47:17 +02:00
Kiara Grouwstra	e10b560e3a	disable exec agent make service group setting conditional make secrets conditional make things conditional rm group	2025-08-04 16:47:17 +02:00
Kiara Grouwstra	3bb984c164	add agent groups	2025-08-04 16:47:17 +02:00
Kiara Grouwstra	c6d670e94f	set service groups	2025-08-04 16:47:17 +02:00