From 520391482411604798cab4d24d48f6c1650718ea Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Mon, 11 Dec 2023 17:36:41 +0100
Subject: add mic92 as krebsminister

---
 krebs/2configs/default.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'krebs/2configs/default.nix')

diff --git a/krebs/2configs/default.nix b/krebs/2configs/default.nix
index 905eaaef..0d55a01f 100644
--- a/krebs/2configs/default.nix
+++ b/krebs/2configs/default.nix
@@ -52,6 +52,7 @@ with import ../../lib/pure.nix { inherit lib; };
     config.krebs.users.makefu.pubkey
     config.krebs.users.tv.pubkey
     config.krebs.users.kmein.pubkey
+    config.krebs.users.mic92.pubkey
   ];
 
   # The NixOS release to be compatible with for stateful data such as databases.
-- 
cgit v1.2.3


From 316e8431c2723e258f9939dfe182f6ce3e7b0b89 Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Tue, 12 Dec 2023 13:09:09 +0100
Subject: default: open retiolum ports

---
 krebs/2configs/default.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'krebs/2configs/default.nix')

diff --git a/krebs/2configs/default.nix b/krebs/2configs/default.nix
index 0d55a01f..dc02f54a 100644
--- a/krebs/2configs/default.nix
+++ b/krebs/2configs/default.nix
@@ -9,6 +9,8 @@ with import ../../lib/pure.nix { inherit lib; };
   krebs.announce-activation.enable = true;
   krebs.enable = true;
   krebs.tinc.retiolum.enable = mkDefault true;
+  networking.firewall.allowedTCPPorts = [ 655 ];
+  networking.firewall.allowedUDPPorts = [ 655 ];
 
   # trust krebs ACME CA
   krebs.ssl.trustIntermediate = true;
-- 
cgit v1.2.3


From 75374a27f903538601a124e1b99c53815bb6c4a6 Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Tue, 12 Dec 2023 13:22:20 +0100
Subject: default: add more retiolum options

---
 krebs/2configs/default.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

(limited to 'krebs/2configs/default.nix')

diff --git a/krebs/2configs/default.nix b/krebs/2configs/default.nix
index dc02f54a..5d64555c 100644
--- a/krebs/2configs/default.nix
+++ b/krebs/2configs/default.nix
@@ -8,7 +8,15 @@ with import ../../lib/pure.nix { inherit lib; };
   ];
   krebs.announce-activation.enable = true;
   krebs.enable = true;
-  krebs.tinc.retiolum.enable = mkDefault true;
+
+  # retiolum
+  krebs.tinc.retiolum = {
+    enable = mkDefault true;
+    extraConfig = ''
+      AutoConnect = yes
+      LocalDiscovery = yes
+    '';
+  };
   networking.firewall.allowedTCPPorts = [ 655 ];
   networking.firewall.allowedUDPPorts = [ 655 ];
 
-- 
cgit v1.2.3