tower: set up cgit-public listen address

2 files changed, 12 insertions, 2 deletions

diff --git a/hosts/tower/web/default.nix b/hosts/tower/web/default.nix
index 76429b7..9a68dc8 100644
--- a/hosts/tower/web/default.nix
+++ b/hosts/tower/web/default.nix
@@ -3,7 +3,7 @@
   imports = [
     # ./blog.nix
     # ./mediadb.nix
-    # ./git.nix
+    ./git.nix
     # ./static.nix
     # ./navidrome.nix
     # ./vaultwarden.nix
diff --git a/hosts/tower/web/git.nix b/hosts/tower/web/git.nix
index e94b1d3..249b8ed 100644
--- a/hosts/tower/web/git.nix
+++ b/hosts/tower/web/git.nix
@@ -9,6 +9,7 @@ let
   };
 in
 {
+  networking.firewall.allowedTCPPorts = [ 8721 ];
   services.nginx = {
     enable = true;
     # virtualHosts."${domainInternal}" = {
@@ -24,7 +25,14 @@ in
     #   ];
     # };
 
-    # virtualHosts."${domainPublic}" = { };
+    virtualHosts."${domainPublic}" = {
+      listen = [
+        {
+          addr = "100.64.0.6";
+          port = 8721;
+        }
+      ];
+    };
   };
 
   # services.cgit.internal = {
@@ -45,6 +53,8 @@ in
     gitHttpBackend.checkExportOkFiles = false;
     repos = {
       futils.path = "/var/lib/git/repos/isabella/futils";
+      xpkgs.path = "/var/lib/git/repos/isabella/xpkgs";
+      sorre-website.path = "/var/lib/git/repos/isabella/sorre-website";
       nixos-config.path = "/var/lib/git/repos/isabella/nixos-config";
     };
     settings = commonSettings;