dixie: open Postgres 5432 on tailscale0 for dropsonde

2026-09-24 22:17:44 -07:00
parent 3c2a272722
commit a40873685a
1 changed files with 6 additions and 3 deletions
@@ -326,9 +326,12 @@ in
      };
    };

-    # Reachable only over the tailnet: 11434 (router), 11433 (vision), 11435 (tether)
-    # on tailscale0, and SSH from the LAN (base config opens 22) for bring-up.
-    networking.firewall.interfaces.tailscale0.allowedTCPPorts = [ 11433 11434 11435 9835 ];
+    # Reachable only over the tailnet: 11434 (router), 11433 (vision), 11435
+    # (tether), 9835 (nvidia), 5432 (dropsonde Postgres) on tailscale0, and SSH
+    # from the LAN (base config opens 22) for bring-up.
+    networking.firewall.interfaces.tailscale0.allowedTCPPorts = [
+      11433 11434 11435 9835 5432
+    ];

    services.prometheus.exporters.nvidia-gpu = {
      enable = true;