strace pkg

container dns
plug hole in firewall
2025-08-04 16:41:59 +02:00 · 2025-08-04 16:41:59 +02:00 · 2025-08-04 16:41:59 +02:00 · 2025-08-04 16:41:59 +02:00 · 2025-08-04 16:34:55 +02:00
1 changed files with 4 additions and 1 deletions
--- a/machines/dev/fedi203/woodpecker.nix
+++ b/machines/dev/fedi203/woodpecker.nix
@ -204,7 +204,6 @@
  networking = {
    nftables.enable = lib.mkForce false;
    firewall = {
-      enable = lib.mkForce true;
      allowedTCPPorts = [
        22
        80
@ -227,6 +226,7 @@
    defaultNetwork.settings = {
      dns_enabled = true;
      ipv6_enabled = true;
+      dns = "95.215.185.6";
    };
  };

@ -234,6 +234,9 @@
    woodpecker-agent-docker = {
      wants = [ "podman.socket" ];
      after = [ "podman.socket" ];
+      serviceConfig = {
+        SupplementaryGroups = [ "podman" ];
+      };
    };
  };
 }
Author	SHA1	Message	Date
Kiara Grouwstra	38b13d9cbf	strace pkg	2025-08-04 16:41:59 +02:00
Kiara Grouwstra	16ea02bac9	container dns	2025-08-04 16:41:59 +02:00
Kiara Grouwstra	e21a9ea70a	plug hole in firewall format	2025-08-04 16:41:59 +02:00
Kiara Grouwstra	a99de6c626	rm agent exec	2025-08-04 16:41:59 +02:00
Kiara Grouwstra	3d93cb597d	disable exec agent make service group setting conditional make secrets conditional make things conditional	2025-08-04 16:34:55 +02:00