services: immich: listen through tailscale only

alarsyo · Dec 16, 2023 · cf545bd · cf545bd
1 parent 37df6b7
commit cf545bd
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/services/immich.nix b/services/immich.nix
@@ -51,6 +51,20 @@ in {
         forceSSL = true;
         useACMEHost = fqdn;
 
+        listen = [
+          # FIXME: hardcoded tailscale IP
+          {
+            addr = "100.115.172.44";
+            port = 443;
+            ssl = true;
+          }
+          {
+            addr = "100.115.172.44";
+            port = 80;
+            ssl = false;
+          }
+        ];
+
         locations."/" = {
           proxyPass = "http://127.0.0.1:${toString cfg.port}";
           proxyWebsockets = true;