summaryrefslogtreecommitdiffstats
path: root/lass/1systems/yellow/config.nix
diff options
context:
space:
mode:
authorlassulus <lassulus@lassul.us>2018-12-02 05:45:33 +0100
committerlassulus <lassulus@lassul.us>2018-12-02 05:45:33 +0100
commit1ac25c33a90e9029953f234644da4ebd31b45353 (patch)
tree20350e5f3edb6c9fbc3c780d12ef2e2b7116dec3 /lass/1systems/yellow/config.nix
parent7a0756c78a0d568001fa74e47c0f00aad94bd5fd (diff)
l yellow.r: add retiolum html listing
Diffstat (limited to 'lass/1systems/yellow/config.nix')
-rw-r--r--lass/1systems/yellow/config.nix10
1 files changed, 9 insertions, 1 deletions
diff --git a/lass/1systems/yellow/config.nix b/lass/1systems/yellow/config.nix
index ee14986ac..48d405111 100644
--- a/lass/1systems/yellow/config.nix
+++ b/lass/1systems/yellow/config.nix
@@ -32,16 +32,24 @@ with import <stockholm/lib>;
};
};
+ services.nginx = {
+ enable = true;
+ virtualHosts."yellow.r".locations."/dl".extraConfig = ''
+ autoindex on;
+ alias /var/download/finished;
+ '';
+ };
+
krebs.iptables = {
enable = true;
tables.filter.INPUT.rules = [
+ { predicate = "-p tcp --dport 80"; target = "ACCEPT"; }
{ predicate = "-p tcp --dport 9091"; target = "ACCEPT"; }
{ predicate = "-p tcp --dport 51413"; target = "ACCEPT"; }
{ predicate = "-p udp --dport 51413"; target = "ACCEPT"; }
];
};
- services.nginx.enable = true;
services.openvpn.servers.nordvpn.config = ''
client
dev tun