lass: port everything to stockholm

1 files changed, 28 insertions, 0 deletions

diff --git a/lass/2configs/retiolum.nix b/lass/2configs/retiolum.nix
new file mode 100644
index 00000000..95890f70
--- /dev/null
+++ b/lass/2configs/retiolum.nix
@@ -0,0 +1,28 @@
+{ ... }:
+
+{
+  imports = [
+    ../../3modules/lass/iptables.nix
+    ../../tv/configs/exim-retiolum.nix
+  ];
+
+  lass.iptables = {
+    tables = {
+      filter.INPUT.rules = [
+        { predicate = "-p tcp --dport smtp"; target = "ACCEPT"; }
+        { predicate = "-p tcp --dport tinc"; target = "ACCEPT"; }
+        { predicate = "-p udp --dport tinc"; target = "ACCEPT"; }
+      ];
+    };
+  };
+
+  krebs.retiolum = {
+    enable = true;
+    hosts = ../../Zhosts;
+    connectTo = [
+      "fastpoke"
+      "cloudkrebs"
+      "pigstarter"
+    ];
+  };
+}