From a40873685a661029a7ca5a7a5b4933a99617c0ac Mon Sep 17 00:00:00 2001 From: "K. Isom" Date: Thu, 24 Sep 2026 22:17:44 -0700 Subject: [PATCH] dixie: open Postgres 5432 on tailscale0 for dropsonde --- hw/dixie/default.nix | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/hw/dixie/default.nix b/hw/dixie/default.nix index 8915a6c..2d0c43e 100644 --- a/hw/dixie/default.nix +++ b/hw/dixie/default.nix @@ -326,9 +326,12 @@ in }; }; - # Reachable only over the tailnet: 11434 (router), 11433 (vision), 11435 (tether) - # on tailscale0, and SSH from the LAN (base config opens 22) for bring-up. - networking.firewall.interfaces.tailscale0.allowedTCPPorts = [ 11433 11434 11435 9835 ]; + # Reachable only over the tailnet: 11434 (router), 11433 (vision), 11435 + # (tether), 9835 (nvidia), 5432 (dropsonde Postgres) on tailscale0, and SSH + # from the LAN (base config opens 22) for bring-up. + networking.firewall.interfaces.tailscale0.allowedTCPPorts = [ + 11433 11434 11435 9835 5432 + ]; services.prometheus.exporters.nvidia-gpu = { enable = true;