microvm and dns stuff

1 files changed, 3 insertions, 7 deletions

diff --git a/os/srv/monero.nix b/os/srv/monero.nix
index 9088ef3..4e74432 100644
--- a/os/srv/monero.nix
+++ b/os/srv/monero.nix
@@ -3,6 +3,7 @@
   lib,
   pkgs,
   masterDomain,
+  securityTemplates,
   ...
 }:
 let
@@ -57,20 +58,15 @@ in
       services.nginx.virtualHosts."xmr.${masterDomain}" = {
         enableACME = true;
         forceSSL = true;
-        listen = [
-          {
-            addr = "10.255.0.1";
-            port = 443;
-          }
-        ];
 
         locations."/" = {
           proxyPass = "http://127.0.0.1:18081";
           extraConfig = ''
             proxy_read_timeout 600s;
             proxy_send_timeout 600s;
-
             client_max_body_size 50m;
+
+            ${securityTemplates.restrictToInternal}
           '';
         };
       };