presets/wireguard: make compatible with secure-node preset

Disable Tor enforcement set by the secure-node preset.
This commit is contained in:
Erik Arvstedt 2023-11-01 18:21:36 +01:00
parent 8a8f32a4fa
commit e784e0ceb8
No known key found for this signature in database
GPG key ID: 33312B944DD97846

View file

@ -183,8 +183,14 @@ in {
# Listen on all addresses, including `serverAddress`.
# This is safe because the listen ports are secured by the firewall.
services.lnd.restAddress = mkIf lndconnect "0.0.0.0";
# clightning-rest always listens on "0.0.0.0"
services.lnd = mkIf lndconnect {
restAddress = "0.0.0.0";
tor.enforce = false;
};
services.clightning-rest = mkIf lndconnect-clightning {
# clightning-rest always listens on "0.0.0.0"
tor.enforce = false;
};
nix-bitcoin.secrets = {
wg-server-private-key = {};