Commit 28f013563994

Vincent Demeester <vincent@sbr.pm>
2026-01-05 07:18:51
feat(paperless): Enable network access on sakhalin
- Bind to all interfaces for access from LAN and VPN - Configure proper public URL for link generation - Open firewall port 8000 for web interface access Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent 43f181d
Changed files (1)
systems
sakhalin
extra.nix
systems/sakhalin/extra.nix
@@ -133,7 +133,11 @@ in
     };
     paperless = {
       enable = true;
-      address = "${builtins.head globals.machines.sakhalin.net.vpn.ips}";
+      address = "0.0.0.0"; # Listen on all interfaces for access via LAN and VPN
+      port = 8000;
+      settings = {
+        PAPERLESS_URL = "https://paperless.sbr.pm";
+      };
     };
     # PostgreSQL backups
     postgresqlBackup = {
@@ -506,4 +510,9 @@ in
       RestartSec = "5s";
     };
   };
+
+  # Open firewall for services accessible from the network
+  networking.firewall.allowedTCPPorts = [
+    8000 # Paperless-ngx web interface
+  ];
 }