summaryrefslogtreecommitdiff
path: root/machines/kusanagi/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'machines/kusanagi/default.nix')
-rw-r--r--machines/kusanagi/default.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/machines/kusanagi/default.nix b/machines/kusanagi/default.nix
index 1c8ccb1..a1d4610 100644
--- a/machines/kusanagi/default.nix
+++ b/machines/kusanagi/default.nix
@@ -19,6 +19,10 @@
networking.hostName = "kusanagi";
+ # Ollama is served on the Wi-Fi LAN only. Tailscale remains governed by ACLs
+ # plus the host firewall because tailscale0 is not a trusted interface.
+ networking.firewall.interfaces.wlp8s0.allowedTCPPorts = [ 11434 ];
+
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. It‘s perfectly fine and recommended to leave
@@ -219,6 +223,7 @@
services.ollama = {
enable = true;
package = pkgs.ollama-rocm;
+ host = "0.0.0.0";
environmentVariables = {
# No HIP_VISIBLE_DEVICES / HSA_OVERRIDE_GFX_VERSION: the 7900 XT is
# native gfx1100 and discovery excludes the unsupported Raphael iGPU