From 51b6a8b612f1b760c011f3ad58ef81ae96b1fe4a Mon Sep 17 00:00:00 2001
From: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
Date: Fri, 11 Apr 2025 10:03:05 +0200
Subject: [PATCH] Make nginx listen on all interfaces
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Needed for local hosts to contact the nix cache via HTTP directly.
We also allow the incoming traffic on port 80.

Reviewed-by: Aleix Boné <abonerib@bsc.es>
---
 m/hut/nginx.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/m/hut/nginx.nix b/m/hut/nginx.nix
index 696ce01..97afc3a 100644
--- a/m/hut/nginx.nix
+++ b/m/hut/nginx.nix
@@ -17,13 +17,14 @@ let
   };
 in
 {
+  networking.firewall.allowedTCPPorts = [ 80 ];
   services.nginx = {
     enable = true;
     virtualHosts."jungle.bsc.es" = {
       root = "${website}";
       listen = [
         {
-          addr = "127.0.0.1";
+          addr = "0.0.0.0";
           port = 80;
         }
       ];