containers

This commit is contained in:
mjallen18
2025-10-05 22:16:44 -05:00
parent ee48ca08bd
commit 02b5dd32a2
5 changed files with 31 additions and 70 deletions

View File

@@ -117,18 +117,6 @@ let
}
];
};
networking = {
firewall = {
enable = true;
allowedTCPPorts = [ cfg.port ];
allowedUDPPorts = [ cfg.port ];
};
# Use systemd-resolved inside the container
# Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
useHostResolvConf = lib.mkForce false;
};
services.resolved.enable = true;
};
bindMounts = {
@@ -150,7 +138,7 @@ let
(lib.${namespace}.mkContainer {
name = "matrix-synapse";
localAddress = cfg.localAddress;
port = cfg.port;
ports = [ cfg.port ];
bindMounts = bindMounts;
config = matrixConfig;
})