diff options
author | makefu <github@syntax-fehler.de> | 2023-09-09 19:42:08 +0200 |
---|---|---|
committer | makefu <github@syntax-fehler.de> | 2023-09-09 19:42:08 +0200 |
commit | 29d72c898d674d2c18fc0f4a76b5e623de0c3dfe (patch) | |
tree | fc4b0695c986a1cda6f1fbbbcbe716e203c54fa3 /lass/2configs/retiolum.nix | |
parent | e157ffa72856e4378aa23b096b2efff233f3cb3d (diff) | |
parent | 083229d0211096daec08673f743ccc45b1d8a0ac (diff) |
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'lass/2configs/retiolum.nix')
-rw-r--r-- | lass/2configs/retiolum.nix | 48 |
1 files changed, 0 insertions, 48 deletions
diff --git a/lass/2configs/retiolum.nix b/lass/2configs/retiolum.nix deleted file mode 100644 index 746bc069..00000000 --- a/lass/2configs/retiolum.nix +++ /dev/null @@ -1,48 +0,0 @@ -{ config, lib, pkgs, ... }: - -{ - - krebs.iptables = { - tables = { - filter.INPUT.rules = let - tincport = toString config.krebs.build.host.nets.retiolum.tinc.port; - in [ - { predicate = "-p tcp --dport ${tincport}"; target = "ACCEPT"; } - { predicate = "-p udp --dport ${tincport}"; target = "ACCEPT"; } - ]; - }; - }; - - krebs.tinc.retiolum = { - enable = true; - connectTo = [ - "prism" - "ni" - "eve" - ]; - extraConfig = '' - AutoConnect = no - StrictSubnets = yes - ${lib.optionalString (config.krebs.build.host.nets.retiolum.via != null) '' - LocalDiscovery = no - ''} - ''; - tincUp = lib.mkIf config.systemd.network.enable ""; - }; - - systemd.network.networks.retiolum = { - matchConfig.Name = "retiolum"; - address = [ - "${config.krebs.build.host.nets.retiolum.ip4.addr}/16" - "${config.krebs.build.host.nets.retiolum.ip6.addr}/16" - ]; - }; - - nixpkgs.config.packageOverrides = pkgs: { - tinc = pkgs.tinc_pre; - }; - - environment.systemPackages = [ - pkgs.tinc - ]; -} |