Give Forgejo runners DNS access

2024-05-28 14:17:53 -04:00 · 2024-05-28 14:17:53 -04:00 · 53eb2e0a49
parent 8140ea6924
commit 53eb2e0a49
1 changed files with 6 additions and 0 deletions
--- a/modules/services/forgejo.nix
+++ b/modules/services/forgejo.nix
@ -98,6 +98,12 @@ in
      };
    };

+    # Allow containers to make DNS queries (https://www.reddit.com/r/NixOS/comments/199f16j/why_dont_my_podman_containers_have_internet_access/)
+    networking.firewall.interfaces.podman4 = {
+      allowedTCPPorts = [ 53 ];
+      allowedUDPPorts = [ 53 ];
+    };
+
    systemd.services = {
      nginx.wants = [ config.systemd.services.forgejo.name ];
    } // lib.optionalAttrs (!cfg.autostart) { forgejo.wantedBy = lib.mkForce [ ]; };