diff options
| author | lassulus <git@lassul.us> | 2023-07-23 23:03:57 +0200 |
|---|---|---|
| committer | lassulus <git@lassul.us> | 2023-07-23 23:03:57 +0200 |
| commit | 0af999432992e98b9541afdf28b5a6ba5846ad71 (patch) | |
| tree | d3366ec636d228a38bec13850a0d4c02652d9752 /lass/1systems | |
| parent | 3db106bbd364db697a3f09279875eb5ca3711db9 (diff) | |
l styx.r: allow smokeping from more interfaces
Diffstat (limited to 'lass/1systems')
| -rw-r--r-- | lass/1systems/styx/config.nix | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/lass/1systems/styx/config.nix b/lass/1systems/styx/config.nix index 93d60727..51016926 100644 --- a/lass/1systems/styx/config.nix +++ b/lass/1systems/styx/config.nix @@ -31,9 +31,9 @@ with import <stockholm/lib>; krebs.build.host = config.krebs.hosts.styx; - krebs.iptables.tables.filter.INPUT.rules = [ - { predicate = "-p tcp --dport ${toString config.services.smokeping.port}"; target = "ACCEPT"; } - ]; + networking.firewall.interfaces.int0.allowedTCPPorts = [ config.services.smokeping.port ]; + networking.firewall.interfaces.retiolum.allowedTCPPorts = [ config.services.smokeping.port ]; + networking.firewall.interfaces.wiregrill.allowedTCPPorts = [ config.services.smokeping.port ]; krebs.power-action.enable = mkForce false; services.smokeping = { |