networking

2026-09-12 15:02:09 -05:00
parent 5cd487ce65
commit 2569083817
4 changed files with 38 additions and 41 deletions
@@ -67,9 +67,9 @@
    acceptTerms = true;
    defaults = {
      # use staging for testing
-      # server = "https://acme-staging-v02.api.letsencrypt.org/directory";
+      server = "https://acme-staging-v02.api.letsencrypt.org/directory";
      # use prod for deploy
-      server = "https://acme-v02.api.letsencrypt.org/directory";
+      # server = "https://acme-v02.api.letsencrypt.org/directory";
      email = "roydumblauskas@gmail.com";
      dnsProvider = "cloudflare";
      # When the service CHECKS to see if certs are near expiry (< 30 days)
@@ -112,6 +112,7 @@

    extraFlags = [
      "--data-dir=/var/lib/rancher/k3s"
+      "--cluster-cidr 10.42.0.0/20" # allow this subnet to connect to psql
    ];
  };

@@ -179,6 +180,9 @@
      "rdblog"
      "gitea"
    ];
+    ipMasks = [
+      "10.42.0.0/20" # k3s cluster mask
+    ];
  };

  # ================================ #