Replace 127.0.0.1 with localhost

This commit is contained in:
SebastianStork 2025-08-28 17:55:47 +02:00
parent e288bb2bf3
commit 0b2fbc2c6d
8 changed files with 12 additions and 9 deletions

View file

@ -24,7 +24,7 @@ in
services.alloy = { services.alloy = {
enable = true; enable = true;
extraFlags = [ extraFlags = [
"--server.http.listen-addr=127.0.0.1:${builtins.toString cfg.port}" "--server.http.listen-addr=localhost:${builtins.toString cfg.port}"
"--disable-reporting" "--disable-reporting"
]; ];
}; };

View file

@ -52,8 +52,8 @@ in
package = inputs.crowdsec.packages.${pkgs.system}.crowdsec; package = inputs.crowdsec.packages.${pkgs.system}.crowdsec;
enrollKeyFile = config.sops.secrets."crowdsec/enrollment-key".path; enrollKeyFile = config.sops.secrets."crowdsec/enrollment-key".path;
settings = { settings = {
api.server.listen_uri = "127.0.0.1:${builtins.toString cfg.apiPort}"; api.server.listen_uri = "localhost:${builtins.toString cfg.apiPort}";
cscli.prometheus_uri = "http://127.0.0.1:${builtins.toString cfg.prometheusPort}"; cscli.prometheus_uri = "http://localhost:${builtins.toString cfg.prometheusPort}";
}; };
allowLocalJournalAccess = true; allowLocalJournalAccess = true;

View file

@ -19,7 +19,7 @@ in
package = inputs.crowdsec.packages.${pkgs.system}.crowdsec-firewall-bouncer; package = inputs.crowdsec.packages.${pkgs.system}.crowdsec-firewall-bouncer;
settings = { settings = {
api_key = "cs-firewall-bouncer"; api_key = "cs-firewall-bouncer";
api_url = "http://127.0.0.1:${builtins.toString cfg.apiPort}"; api_url = "http://localhost:${builtins.toString cfg.apiPort}";
}; };
}; };

View file

@ -96,7 +96,10 @@ in
environmentFile = config.sops.templates."gatus.env".path; environmentFile = config.sops.templates."gatus.env".path;
settings = { settings = {
web.port = cfg.port; web = {
address = "localhost";
port = cfg.port;
};
storage = { storage = {
type = "sqlite"; type = "sqlite";

View file

@ -50,7 +50,7 @@ in
https = true; https = true;
settings = { settings = {
overwriteProtocol = "https"; overwriteProtocol = "https";
trusted_proxies = [ "127.0.0.1" ]; trusted_proxies = [ "localhost" ];
log_type = "file"; log_type = "file";
default_phone_region = "DE"; default_phone_region = "DE";
maintenance_window_start = "2"; # UTC maintenance_window_start = "2"; # UTC

View file

@ -25,7 +25,7 @@ in
enable = true; enable = true;
settings = { settings = {
base-url = "https://${cfg.domain}"; base-url = "https://${cfg.domain}";
listen-http = ":${builtins.toString cfg.port}"; listen-http = "localhost:${builtins.toString cfg.port}";
behind-proxy = true; behind-proxy = true;
web-root = "disable"; web-root = "disable";
}; };

View file

@ -70,7 +70,7 @@ in
group = lib.mkIf (!cfg.isServer) "users"; group = lib.mkIf (!cfg.isServer) "users";
dataDir = lib.mkIf (!cfg.isServer) "/home/seb"; dataDir = lib.mkIf (!cfg.isServer) "/home/seb";
guiAddress = lib.mkIf cfg.isServer "127.0.0.1:${builtins.toString cfg.gui.port}"; guiAddress = lib.mkIf cfg.isServer "localhost:${builtins.toString cfg.gui.port}";
cert = lib.mkIf useStaticTls config.sops.secrets."syncthing/cert".path; cert = lib.mkIf useStaticTls config.sops.secrets."syncthing/cert".path;
key = lib.mkIf useStaticTls config.sops.secrets."syncthing/key".path; key = lib.mkIf useStaticTls config.sops.secrets."syncthing/key".path;

View file

@ -34,7 +34,7 @@ in
enable = true; enable = true;
package = pkgs-unstable.victorialogs; package = pkgs-unstable.victorialogs;
listenAddress = ":${builtins.toString cfg.port}"; listenAddress = "localhost:${builtins.toString cfg.port}";
extraOptions = [ "-retention.maxDiskSpaceUsageBytes=${cfg.maxDiskSpaceUsage}" ]; extraOptions = [ "-retention.maxDiskSpaceUsageBytes=${cfg.maxDiskSpaceUsage}" ];
}; };
}; };