radicle/radicle-infra
1
0
Fork 0
mirror of https://seed.radicle.dev/rad:z254T5p17bdFPmzfDojsdjo4HjpoZ.git synced 2026-10-18 19:10:32 +08:00
Code Issues Packages Projects Releases Wiki Activity

os/radicle: Also use high ports

Browse Source
This commit is contained in:
Lorenz Leutgeb
2025-10-16 20:46:42 +02:00
parent a18161b0cf
commit 4103847eac
6 changed files with 21 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dns/dnsconfig.js
+3
View File
@@ -53,6 +53,7 @@ D("radicle.xyz", REG_NONE, DnsProvider(DSP_CLOUDFLARE),
PTR("_radicle-node._tcp", "iris._radicle-node._tcp.radicle.xyz."),
SRV("iris._radicle-node._tcp", 32767, 32767, 8776, "iris.radicle.xyz."),
SRV("iris._radicle-node._tcp", 32767, 32767, 58776, "iris.radicle.xyz."),
TXT("iris._radicle-node._tcp", "\"nid=z6MkrLMMsiPWUcNPHcRajuMi9mDfYckSoJyPwwnknocNYPm7\""),
@@ -65,6 +66,7 @@ D("radicle.xyz", REG_NONE, DnsProvider(DSP_CLOUDFLARE),
PTR("_radicle-node._tcp", "rosa._radicle-node._tcp.radicle.xyz."),
SRV("rosa._radicle-node._tcp", 32767, 32767, 8776, "rosa.radicle.xyz."),
SRV("rosa._radicle-node._tcp", 32767, 32767, 58776, "rosa.radicle.xyz."),
TXT("rosa._radicle-node._tcp", "\"nid=z6Mkmqogy2qEM2ummccUthFEaaHvyYmYBYh3dbe9W4ebScxo\""),
@@ -87,6 +89,7 @@ D("radicle.xyz", REG_NONE, DnsProvider(DSP_CLOUDFLARE),
// LOC("seed", "60 20 36.488 N 25 01 48.587 E 46m 10m 100m 100m"),
PTR("_radicle-node._tcp", "seed._radicle-node._tcp.radicle.xyz."),
SRV("seed._radicle-node._tcp", 32767, 32767, 8776, "seed.radicle.xyz."),
SRV("seed._radicle-node._tcp", 32767, 32767, 58776, "seed.radicle.xyz."),
TXT("seed._radicle-node._tcp", "\"nid=z6MksmpU5b1dS7oaqF2bHXhQi1DWy2hB7Mh9CuN7y1DN6QSz\""),
os/host/iris/radicle.nix
+1 -1
View File
@@ -19,7 +19,7 @@
services.radicle = {
httpd.nginx.serverAliases = ["seed.radicle.garden"];
settings.node.externalAddresses = lib.mkAfter [
"irisradizskwweumpydlj4oammoshkxxjur3ztcmo7cou5emc6s5lfid.onion:8776"
"irisradizskwweumpydlj4oammoshkxxjur3ztcmo7cou5emc6s5lfid.onion:58776"
];
};
}
os/host/rosa/radicle.nix
+1 -1
View File
@@ -19,7 +19,7 @@
services.radicle = {
httpd.nginx.serverAliases = ["ash.radicle.garden"];
settings.node.externalAddresses = lib.mkAfter [
"rosarad5bxgdlgjnzzjygnsxrwxmoaj4vn7xinlstwglxvyt64jlnhyd.onion:8776"
"rosarad5bxgdlgjnzzjygnsxrwxmoaj4vn7xinlstwglxvyt64jlnhyd.onion:58776"
];
};
}
os/host/seed/radicle.nix
+1 -1
View File
@@ -16,6 +16,6 @@
};
services.radicle.settings.node.externalAddresses = lib.mkAfter [
"seedradanrg2oje34eyidx4z63gpuakgaedaetvt7xxw5whv6qnexmid.onion:8776"
"seedradanrg2oje34eyidx4z63gpuakgaedaetvt7xxw5whv6qnexmid.onion:58776"
];
}
os/mixin/radicle.nix
+14 -4
View File
@@ -4,21 +4,29 @@
lib,
...
}: {
networking.firewall.allowedTCPPorts = [
8776 # radicle-node
58776 # radicle-node
];
services.radicle = {
enable = true;
package = pkgs.radicle-node-overlay;
privateKeyFile = "/etc/ssh/ssh_host_ed25519_key";
publicKey = "/etc/ssh/ssh_host_ed25519_key.pub";
node.extraArgs = [ "--listen" "[::]:58776" ];
settings = {
node = {
alias = config.networking.fqdn;
externalAddresses = lib.mkBefore [
"${config.networking.fqdn}:8776"
"${config.networking.fqdn}:58776"
];
connect = [
"z6Mkmqogy2qEM2ummccUthFEaaHvyYmYBYh3dbe9W4ebScxo@rosa.radicle.xyz:8776"
"z6MkrLMMsiPWUcNPHcRajuMi9mDfYckSoJyPwwnknocNYPm7@iris.radicle.xyz:8776"
"z6MksmpU5b1dS7oaqF2bHXhQi1DWy2hB7Mh9CuN7y1DN6QSz@seed.radicle.xyz:8776"
"z6Mkmqogy2qEM2ummccUthFEaaHvyYmYBYh3dbe9W4ebScxo@rosa.radicle.xyz:58776"
"z6MkrLMMsiPWUcNPHcRajuMi9mDfYckSoJyPwwnknocNYPm7@iris.radicle.xyz:58776"
"z6MksmpU5b1dS7oaqF2bHXhQi1DWy2hB7Mh9CuN7y1DN6QSz@seed.radicle.xyz:58776"
];
peers.type = "dynamic";
db.journalMode = "wal";
@@ -58,4 +66,6 @@
};
};
};
systemd.services.radicle-node.serviceConfig.SocketBindAllow = ["tcp:58776"];
}
os/mixin/tor.nix
+1
View File
@@ -20,6 +20,7 @@ in {
"radicle" = {
map = [
{port = 8776;}
{port = 58776;}
];
secretKey = config.sops.secrets.${secret}.path;
};