From b1569158057042aa50e6816e38f0305bab8e5f9c Mon Sep 17 00:00:00 2001 From: makefu Date: Thu, 28 Jul 2016 12:58:54 +0200 Subject: makefu: pornocauster -> x --- makefu/2configs/tinc/siem.nix | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 makefu/2configs/tinc/siem.nix (limited to 'makefu/2configs/tinc/siem.nix') diff --git a/makefu/2configs/tinc/siem.nix b/makefu/2configs/tinc/siem.nix new file mode 100644 index 00000000..fae72590 --- /dev/null +++ b/makefu/2configs/tinc/siem.nix @@ -0,0 +1,12 @@ +{lib, config, ... }: +{ + # TODO do not know why we need to force it, port is only set via default to 655 + krebs.build.host.nets.siem.tinc.port = lib.mkForce 1655; + + networking.firewall.allowedUDPPorts = [ 1665 ]; + networking.firewall.allowedTCPPorts = [ 1655 ]; + krebs.tinc.siem = { + enable = true; + connectTo = [ "shoney" ]; + }; +} -- cgit v1.2.3 From 9ef2790f099115a4759ae7ae45945a4d85ad097d Mon Sep 17 00:00:00 2001 From: makefu Date: Tue, 2 Aug 2016 11:50:53 +0200 Subject: m 2 tinc/siem: add krebs dns provider --- makefu/2configs/tinc/siem.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'makefu/2configs/tinc/siem.nix') diff --git a/makefu/2configs/tinc/siem.nix b/makefu/2configs/tinc/siem.nix index fae72590..8f17f1a0 100644 --- a/makefu/2configs/tinc/siem.nix +++ b/makefu/2configs/tinc/siem.nix @@ -2,7 +2,7 @@ { # TODO do not know why we need to force it, port is only set via default to 655 krebs.build.host.nets.siem.tinc.port = lib.mkForce 1655; - + krebs.dns.providers.siem = "hosts"; networking.firewall.allowedUDPPorts = [ 1665 ]; networking.firewall.allowedTCPPorts = [ 1655 ]; krebs.tinc.siem = { -- cgit v1.2.3