wolcen/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Additional ollama settings

Browse source
This commit is contained in:
Chris (wolcen) Thompson 2025-09-07 17:18:27 -04:00
parent f0cc263047
commit a13deb8277
1 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

11
hosts/default/configuration.nix
View file

@ -214,8 +214,9 @@ in
logReversePathDrops = true; logReversePathDrops = true;
checkReversePath = "loose"; checkReversePath = "loose";
extraCommands = '' extraCommands = ''
# Enable connections to Ollama for VPN users: # Enable connections to openweb-ui for VPN users:
iptables -t filter -I INPUT --protocol TCP --source 10.40.4.0/24 --destination 10.40.4.2 --dport 8080 -j ACCEPT iptables -t filter -I INPUT --protocol TCP --source 10.40.4.0/24 --destination 10.40.4.2 --dport 8080 -j ACCEPT
# Enable connections to ollama from the openweb-ui instance:
iptables -t filter -I INPUT --protocol TCP --source 10.40.4.2/32 --destination 10.40.4.2 --dport 11434 -j ACCEPT iptables -t filter -I INPUT --protocol TCP --source 10.40.4.2/32 --destination 10.40.4.2 --dport 11434 -j ACCEPT
''; '';
# wireguard trips rpfilter up # wireguard trips rpfilter up
@ -398,9 +399,11 @@ in
services.ollama = { services.ollama = {
enable = true; enable = true;
acceleration = "rocm"; acceleration = "rocm";
#environmentVariables = { environmentVariables = {
# HCC_AMDGPU_TARGET = "gfx1031"; # used to be necessary, but doesn't seem to anymore HCC_AMDGPU_TARGET = "gfx1031"; # used to be necessary, but doesn't seem to anymore
#}; OLLAMA_LOAD_TIMEOUT = "2"; # Reduce load timeout (from 5 min)...if it's that big, forget it.
OLLAMA_ORIGINS = "10.40.4.2"; # Only accept connections from locally.
};
host = "10.40.4.2"; # See also ip46tables update in firewall extracommands host = "10.40.4.2"; # See also ip46tables update in firewall extracommands
rocmOverrideGfx = "10.3.0"; rocmOverrideGfx = "10.3.0";
}; };