diff options
author | lassulus <lassulus@lassul.us> | 2019-04-19 16:14:53 +0200 |
---|---|---|
committer | lassulus <lassulus@lassul.us> | 2019-04-26 20:09:55 +0200 |
commit | d5c580daa1c1fd878dad9f08ea699bc531791a08 (patch) | |
tree | 1f4f3f32f4079648e288ece2c610243de2771f8f /mb/2configs/retiolum.nix | |
parent | 1acb5f9fd895fd8b241197ef309f9cc09c211719 (diff) |
init mb
Diffstat (limited to 'mb/2configs/retiolum.nix')
-rw-r--r-- | mb/2configs/retiolum.nix | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/mb/2configs/retiolum.nix b/mb/2configs/retiolum.nix new file mode 100644 index 000000000..5a87d52af --- /dev/null +++ b/mb/2configs/retiolum.nix @@ -0,0 +1,33 @@ +{ config, pkgs, ... }: + +{ + + krebs.iptables = { + tables = { + filter.INPUT.rules = let + tincport = toString config.krebs.build.host.nets.retiolum.tinc.port; + in [ + { predicate = "-p tcp --dport ${tincport}"; target = "ACCEPT"; } + { predicate = "-p udp --dport ${tincport}"; target = "ACCEPT"; } + ]; + }; + }; + + krebs.tinc.retiolum = { + enableLegacy = true; + enable = true; + connectTo = [ + "prism" + "gum" + "ni" + ]; + }; + + nixpkgs.config.packageOverrides = pkgs: { + tinc = pkgs.tinc_pre; + }; + + environment.systemPackages = [ + pkgs.tinc + ]; +} |