summaryrefslogtreecommitdiffstats
path: root/nin/2configs/retiolum.nix
diff options
context:
space:
mode:
authorlassulus <lassulus@lassul.us>2019-09-25 21:50:44 +0200
committerlassulus <lassulus@lassul.us>2019-09-25 21:50:44 +0200
commitea7aa76e0e07f81b8bd0f5184ef3c088697c2a90 (patch)
tree19649d01a57d3ec4d8ce1165771be4201feb0401 /nin/2configs/retiolum.nix
parent2b53aaa1784f431696f0685d304000b04e1a4874 (diff)
parent7050df8789e7e7bfff93dabdcb3897ec6611cb1a (diff)
Merge remote-tracking branch 'ni/master'
Diffstat (limited to 'nin/2configs/retiolum.nix')
-rw-r--r--nin/2configs/retiolum.nix28
1 files changed, 28 insertions, 0 deletions
diff --git a/nin/2configs/retiolum.nix b/nin/2configs/retiolum.nix
new file mode 100644
index 000000000..821e3cc00
--- /dev/null
+++ b/nin/2configs/retiolum.nix
@@ -0,0 +1,28 @@
+{ ... }:
+
+{
+
+ krebs.iptables = {
+ tables = {
+ filter.INPUT.rules = [
+ { predicate = "-i retiolum -p tcp --dport smtp"; target = "ACCEPT"; }
+ { predicate = "-p tcp --dport tinc"; target = "ACCEPT"; }
+ { predicate = "-p udp --dport tinc"; target = "ACCEPT"; }
+ ];
+ };
+ };
+
+ krebs.tinc.retiolum = {
+ enable = true;
+ connectTo = [
+ "prism"
+ "pigstarter"
+ "gum"
+ "flap"
+ ];
+ };
+
+ nixpkgs.config.packageOverrides = pkgs: {
+ tinc = pkgs.tinc_pre;
+ };
+}