postgres upgrade@m3-atlas

2025-05-12 16:06:40 +02:00
parent 7854d75742
commit e0aa2783bb
6 changed files with 38 additions and 16 deletions
--- a/hosts/m3-atlas/services/mysql.nix
+++ b/hosts/m3-atlas/services/mysql.nix
@ -18,5 +18,10 @@
    calendar = "03:00:00";
    databases = ["ghost" "matomo"];
  };
-  networking.firewall.allowedTCPPorts = [3306];
+  networking.firewall = {
+    extraCommands = ''
+      iptables -A INPUT -p tcp -s 127.0.0.1 --dport 3306 -j ACCEPT
+      iptables -A INPUT -p tcp -s 10.89.0.0/24 --dport 3306 -j ACCEPT
+    '';
+  };
 }