mirror/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-09-29 15:43:00 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #292291 from cafkafk/dockerRegistry-openFirewall

Browse Source 
nixos/dockerRegistry: add `openFirewall` option
This commit is contained in:
Sarah Brofeldt 2024-03-01 09:57:07 +01:00 committed by GitHub
commit 13a94ad1fb
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
nixos/modules/services/misc/docker-registry.nix
View File

@ -63,6 +63,12 @@ in {
type = types.port;
};
openFirewall = mkOption {
type = types.bool;
default = false;
description = lib.mdDoc "Opens the port used by the firewall.";
};
storagePath = mkOption {
type = types.nullOr types.path;
default = "/var/lib/docker-registry";
@ -154,5 +160,9 @@ in {
isSystemUser = true;
};
users.groups.docker-registry = {};
networking.firewall = mkIf cfg.openFirewall {
allowedTCPPorts = [ cfg.port ];
};
};
}

2
nixos/tests/docker-registry.nix
View File

@ -13,7 +13,7 @@ import ./make-test-python.nix ({ pkgs, ...} : {
services.dockerRegistry.port = 8080;
services.dockerRegistry.listenAddress = "0.0.0.0";
services.dockerRegistry.enableGarbageCollect = true;
networking.firewall.allowedTCPPorts = [ 8080 ];
services.dockerRegistry.openFirewall = true;
};
client1 = { ... }: {