mirror of
https://github.com/ilyakooo0/nixpkgs.git
synced 2024-09-11 07:15:54 +03:00
nixos/dockerRegistry: add openFirewall
option
Signed-off-by: Christina Sørensen <christina@cafkafk.com>
This commit is contained in:
parent
fdfe8b3a0c
commit
d31cbb78ca
@ -63,6 +63,12 @@ in {
|
|||||||
type = types.port;
|
type = types.port;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
openFirewall = mkOption {
|
||||||
|
type = types.bool;
|
||||||
|
default = false;
|
||||||
|
description = lib.mdDoc "Opens the port used by the firewall.";
|
||||||
|
};
|
||||||
|
|
||||||
storagePath = mkOption {
|
storagePath = mkOption {
|
||||||
type = types.nullOr types.path;
|
type = types.nullOr types.path;
|
||||||
default = "/var/lib/docker-registry";
|
default = "/var/lib/docker-registry";
|
||||||
@ -154,5 +160,9 @@ in {
|
|||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
};
|
};
|
||||||
users.groups.docker-registry = {};
|
users.groups.docker-registry = {};
|
||||||
|
|
||||||
|
networking.firewall = mkIf cfg.openFirewall {
|
||||||
|
allowedTCPPorts = [ cfg.port ];
|
||||||
|
};
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
@ -13,7 +13,7 @@ import ./make-test-python.nix ({ pkgs, ...} : {
|
|||||||
services.dockerRegistry.port = 8080;
|
services.dockerRegistry.port = 8080;
|
||||||
services.dockerRegistry.listenAddress = "0.0.0.0";
|
services.dockerRegistry.listenAddress = "0.0.0.0";
|
||||||
services.dockerRegistry.enableGarbageCollect = true;
|
services.dockerRegistry.enableGarbageCollect = true;
|
||||||
networking.firewall.allowedTCPPorts = [ 8080 ];
|
services.dockerRegistry.openFirewall = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
client1 = { ... }: {
|
client1 = { ... }: {
|
||||||
|
Loading…
Reference in New Issue
Block a user