snix/ops/machines
Florian Klink 6666d38584 fix(ops/meta01): fix http listener port, restrict tcp
The config seems a bit underdocumented, but this is what gets it to
listen on 4722 for http.

While we have firewall rules in place, we don't want this to listen on
*:$randomPort, for tcp but just have it disabled.

This doesn't seem to be possible right now, due to a bug in viper, but
we can at least restrict it to listen to localhost only for TCP.

Change-Id: I94d379b8820fd32dc1d75082d3a7fb078f93e4ec
Reviewed-on: https://cl.snix.dev/c/snix/+/30523
Autosubmit: Florian Klink <flokli@flokli.de>
Tested-by: besadii
Reviewed-by: Ryan Lahfa <ryan@lahfa.xyz>
2025-05-16 09:15:26 +00:00
..
archivist-ec2 chore(ops): move archivist machine to ops and contrib 2025-03-20 12:21:44 +00:00
build01 fix(machines/build01): move back to stc-ng 2025-05-15 14:19:01 +00:00
gerrit01 feat(ops/gerrit01): provide buildkite-api-proxy-token.age 2025-05-03 22:36:42 +00:00
meta01 fix(ops/meta01): fix http listener port, restrict tcp 2025-05-16 09:15:26 +00:00
public01 feat(fun/solves-this): add, deploy to public01 2025-05-12 14:40:17 +00:00
snix-cache refactor(ops): make nixos.snix.cache grafana listen on unix socket 2025-05-09 23:06:14 +00:00
all-systems.nix chore(ops): move archivist machine to ops and contrib 2025-03-20 12:21:44 +00:00