@cryptotaxi247 / infra-1 / commits / b325e860

haumea: allow postgres access on vlan4000

Martin Weinelt committed Sep 21, 2025 at 15:02 UTC b325e860813dd89bdeaccbd623ac05ec67edb4ec
1 file changed +3
build/haumea/postgresql.nix
+3
@@ -15,6 +15,8 @@
15
16 networking.firewall.interfaces.wg0.allowedTCPPorts = [ 5432 ];
17
18 + networking.firewall.interfaces."vlan4000".allowedTCPPorts = [ 5432 ];
19 +
20 services.postgresql = {
21 enable = true;
22 enableJIT = true;
@@ -90,6 +92,7 @@
92 # FIXME: don't use 'trust'.
93 authentication = ''
94 host hydra all 10.254.1.1/32 trust
95 + host hydra all 10.0.40.0/32 trust
96 local all root peer map=prometheus
97 '';
98