From 1eba5398fd09f98bd11cbf8c3b80f20bb9ce1f2d Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Fri, 12 Jun 2026 00:53:25 +0200
Subject: microvm and dns stuff

---
 os/srv/monero.nix | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

(limited to 'os/srv/monero.nix')

diff --git a/os/srv/monero.nix b/os/srv/monero.nix
index 9088ef3..4e74432 100644
--- a/os/srv/monero.nix
+++ b/os/srv/monero.nix
@@ -3,6 +3,7 @@
   lib,
   pkgs,
   masterDomain,
+  securityTemplates,
   ...
 }:
 let
@@ -57,20 +58,15 @@ in
       services.nginx.virtualHosts."xmr.${masterDomain}" = {
         enableACME = true;
         forceSSL = true;
-        listen = [
-          {
-            addr = "10.255.0.1";
-            port = 443;
-          }
-        ];
 
         locations."/" = {
           proxyPass = "http://127.0.0.1:18081";
           extraConfig = ''
             proxy_read_timeout 600s;
             proxy_send_timeout 600s;
-
             client_max_body_size 50m;
+
+            ${securityTemplates.restrictToInternal}
           '';
         };
       };
-- 
cgit v1.3