nixos/warpgate: add protocol specific `external_host` (36fa9a85) · Commits · nix / nixpkgs

nixos/modules/services/security/warpgate.nix

+26 −0

Original line number	Diff line number	Diff line
		@@ -105,6 +105,7 @@ in
		description = ''
		Configure the domain name of this Warpgate instance.
		See [HTTP domain binding](https://warpgate.null.page/http-domain-binding/).
		This option is considered legacy, please use protocol specific `external_host` instead.
		'';
		default = null;
		type = nullOr str;
		@@ -128,6 +129,11 @@ in
		default = "[::]:2222";
		type = str;
		};
		external_host = mkOption {
		description = "The SSH listener is reachable via this domain name externally.";
		default = null;
		type = nullOr str;
		};
		external_port = mkOption {
		description = "The SSH listener is reachable via this port externally.";
		default = null;
		@@ -164,6 +170,11 @@ in
		default = "[::]:8888";
		type = str;
		};
		external_host = mkOption {
		description = "The HTTP listener is reachable via this domain name externally.";
		default = null;
		type = nullOr str;
		};
		external_port = mkOption {
		description = "The HTTP listener is reachable via this port externally.";
		default = null;
		@@ -239,6 +250,11 @@ in
		default = "[::]:33306";
		type = str;
		};
		external_host = mkOption {
		description = "The MySQL listener is reachable via this domain name externally.";
		default = null;
		type = nullOr str;
		};
		external_port = mkOption {
		description = "The MySQL listener is reachable via this port externally.";
		default = null;
		@@ -266,6 +282,11 @@ in
		default = "[::]:55432";
		type = str;
		};
		external_host = mkOption {
		description = "The PostgreSQL listener is reachable via this domain name externally.";
		default = null;
		type = nullOr str;
		};
		external_port = mkOption {
		description = "The PostgreSQL listener is reachable via this port externally.";
		default = null;
		@@ -293,6 +314,11 @@ in
		default = "[::]:8443";
		type = str;
		};
		external_host = mkOption {
		description = "The Kubernetes listener is reachable via this domain name externally.";
		default = null;
		type = nullOr str;
		};
		external_port = mkOption {
		description = "The Kubernetes listener is reachable via this port externally.";
		default = null;