diff options
author | makefu <github@syntax-fehler.de> | 2015-11-15 20:18:35 +0100 |
---|---|---|
committer | makefu <github@syntax-fehler.de> | 2015-11-15 20:18:35 +0100 |
commit | dcf55255e6b6cf216f493c28adad1909edf18d3d (patch) | |
tree | c10b716282e97507002d4764225d568911d7b4b1 /makefu/1systems/gum.nix | |
parent | 773a67a983cbe1928da6c524db24a25229a6f5fe (diff) | |
parent | e0ae8c1a3fe333de8a14b04b4a7e2dd01163b727 (diff) |
Merge branch 'master' of pnp:stockholm
Diffstat (limited to 'makefu/1systems/gum.nix')
-rw-r--r-- | makefu/1systems/gum.nix | 32 |
1 files changed, 17 insertions, 15 deletions
diff --git a/makefu/1systems/gum.nix b/makefu/1systems/gum.nix index 44ab8c6f8..d8b7ed5f9 100644 --- a/makefu/1systems/gum.nix +++ b/makefu/1systems/gum.nix @@ -17,7 +17,6 @@ in { krebs.build.target = "root@gum.krebsco.de"; krebs.build.host = config.krebs.hosts.gum; - # Chat environment.systemPackages = with pkgs;[ weechat @@ -34,21 +33,24 @@ in { services.udev.extraRules = '' SUBSYSTEM=="net", ATTR{address}=="c8:0a:a9:c8:ee:dd", NAME="et0" ''; + boot.kernelParams = [ "ipv6.disable=1" ]; networking = { - firewall = { - allowPing = true; - allowedTCPPorts = [ - # smtp - 25 - # http - 80 443 - # tinc - 655 - ]; - allowedUDPPorts = [ - # tinc - 655 53 - ]; + enableIPv6 = false; + firewall = { + allowPing = true; + logRefusedConnections = false; + allowedTCPPorts = [ + # smtp + 25 + # http + 80 443 + # tinc + 655 + ]; + allowedUDPPorts = [ + # tinc + 655 53 + ]; }; interfaces.et0.ip4 = [{ address = external-ip; |