ulve/nixos-dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nixserve: open Music Assistant/mDNS ports, add paperless service, bump flake inputs

Browse Source 
Allow TCP 8095 (Music Assistant web UI) and UDP 5353 (mDNS) through the
firewall so the LAN interface can reach it and Chromecast discovery works;
previously only the trusted tailscale0 interface had access.
This commit is contained in:
ulve
2026-10-12 09:08:52 +02:00
parent ff0b2efa06
commit 1550e333e0
3 changed files with 24 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/nixserve/default.nix
+2 -2
View File
@@ -47,8 +47,8 @@
users.groups.media = {};
users.users.jellyfin.extraGroups = [ "media" ];
networking.firewall.allowedTCPPorts = [ 80 443 /* HTTP */ 111 2049 4000 4001 4002 20048 /* NFS */ 3923 /* copyparty */ 8123 /* Home Assistant (LAN devices, e.g. Cast TTS fetch) */ ];
networking.firewall.allowedUDPPorts = [ 111 2049 4000 4001 4002 20048 /* NFS */ ];
networking.firewall.allowedTCPPorts = [ 80 443 /* HTTP */ 111 2049 4000 4001 4002 20048 /* NFS */ 3923 /* copyparty */ 8123 /* Home Assistant (LAN devices, e.g. Cast TTS fetch) */ 8095 /* Music Assistant */ ];
networking.firewall.allowedUDPPorts = [ 111 2049 4000 4001 4002 20048 /* NFS */ 5353 /* mDNS - Chromecast discovery */ ];
networking.firewall.trustedInterfaces = [ "tailscale0" ];
programs.zsh.enable = true;