diff options
author | jeschli <jeschli@gmail.com> | 2019-04-28 15:05:34 +0200 |
---|---|---|
committer | jeschli <jeschli@gmail.com> | 2019-04-28 15:05:34 +0200 |
commit | e45b3492b3961685936378a160adb225789e51d9 (patch) | |
tree | cc0480e485ab78d1f52f80ec36987b9a57e925f7 /mb/2configs/retiolum.nix | |
parent | 97d4f9a771a9bbb1b45085569028db2d7dfbd610 (diff) | |
parent | 915e4b843790d3e71bdccea124d4832ca042e456 (diff) |
Merge branch 'master' of prism.r:stockholm
Diffstat (limited to 'mb/2configs/retiolum.nix')
-rw-r--r-- | mb/2configs/retiolum.nix | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/mb/2configs/retiolum.nix b/mb/2configs/retiolum.nix new file mode 100644 index 00000000..5a87d52a --- /dev/null +++ b/mb/2configs/retiolum.nix @@ -0,0 +1,33 @@ +{ config, pkgs, ... }: + +{ + + krebs.iptables = { + tables = { + filter.INPUT.rules = let + tincport = toString config.krebs.build.host.nets.retiolum.tinc.port; + in [ + { predicate = "-p tcp --dport ${tincport}"; target = "ACCEPT"; } + { predicate = "-p udp --dport ${tincport}"; target = "ACCEPT"; } + ]; + }; + }; + + krebs.tinc.retiolum = { + enableLegacy = true; + enable = true; + connectTo = [ + "prism" + "gum" + "ni" + ]; + }; + + nixpkgs.config.packageOverrides = pkgs: { + tinc = pkgs.tinc_pre; + }; + + environment.systemPackages = [ + pkgs.tinc + ]; +} |