From 6141d0081042556d3a79ad3a047bf4f2325e5038 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Thu, 20 Aug 2026 22:30:14 +0200
Subject: tower: set up cgit-public listen address

---
 hosts/tower/web/git.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

(limited to 'hosts/tower/web/git.nix')

diff --git a/hosts/tower/web/git.nix b/hosts/tower/web/git.nix
index e94b1d3..249b8ed 100644
--- a/hosts/tower/web/git.nix
+++ b/hosts/tower/web/git.nix
@@ -9,6 +9,7 @@ let
   };
 in
 {
+  networking.firewall.allowedTCPPorts = [ 8721 ];
   services.nginx = {
     enable = true;
     # virtualHosts."${domainInternal}" = {
@@ -24,7 +25,14 @@ in
     #   ];
     # };
 
-    # virtualHosts."${domainPublic}" = { };
+    virtualHosts."${domainPublic}" = {
+      listen = [
+        {
+          addr = "100.64.0.6";
+          port = 8721;
+        }
+      ];
+    };
   };
 
   # services.cgit.internal = {
@@ -45,6 +53,8 @@ in
     gitHttpBackend.checkExportOkFiles = false;
     repos = {
       futils.path = "/var/lib/git/repos/isabella/futils";
+      xpkgs.path = "/var/lib/git/repos/isabella/xpkgs";
+      sorre-website.path = "/var/lib/git/repos/isabella/sorre-website";
       nixos-config.path = "/var/lib/git/repos/isabella/nixos-config";
     };
     settings = commonSettings;
-- 
cgit v1.3.1