{ config, lib, pkgs, ... }: with import <stockholm/lib>; { krebs.tinc.retiolum = { enable = true; connectTo = filter (ne config.krebs.build.host.name) [ "gum" "ni" "prism" ]; extraConfig = '' LocalDiscovery = yes ''; tincPackage = pkgs.tinc_pre; }; tv.iptables.input-internet-accept-tcp = singleton "tinc"; tv.iptables.input-internet-accept-udp = singleton "tinc"; }