37 lines
890 B
Nix
37 lines
890 B
Nix
{ ... }: {
|
|
networking.nat = {
|
|
enable = true;
|
|
internalInterfaces = [ "ve-+" ];
|
|
externalInterface = "ens3";
|
|
# Lazy IPv6 connectivity for the container
|
|
enableIPv6 = true;
|
|
};
|
|
|
|
containers.webserver = {
|
|
autoStart = true;
|
|
privateNetwork = true;
|
|
hostAddress = "192.168.100.10";
|
|
localAddress = "192.168.100.11";
|
|
hostAddress6 = "fc00::1";
|
|
localAddress6 = "fc00::2";
|
|
config = { config, pkgs, lib, ... }: {
|
|
|
|
services.httpd = {
|
|
enable = true;
|
|
adminAddr = "admin@example.org";
|
|
};
|
|
|
|
networking = {
|
|
firewall.allowedTCPPorts = [ 80 ];
|
|
|
|
# Use systemd-resolved inside the container
|
|
# Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
|
|
useHostResolvConf = lib.mkForce false;
|
|
};
|
|
|
|
services.resolved.enable = true;
|
|
|
|
system.stateVersion = "24.11";
|
|
};
|
|
};
|
|
}
|