stockholm/lass/2configs/retiolum.nix

42 lines
875 B
Nix
Raw Normal View History

{ config, lib, pkgs, ... }:
{
2015-10-01 20:13:40 +00:00
krebs.iptables = {
tables = {
2017-09-19 09:51:22 +00:00
filter.INPUT.rules = let
tincport = toString config.krebs.build.host.nets.retiolum.tinc.port;
in [
{ predicate = "-p tcp --dport ${tincport}"; target = "ACCEPT"; }
{ predicate = "-p udp --dport ${tincport}"; target = "ACCEPT"; }
];
};
};
krebs.tinc.retiolum = {
enable = true;
connectTo = [
"prism"
"ni"
2022-01-24 16:08:09 +00:00
"eve"
];
2019-05-29 13:40:44 +00:00
extraConfig = ''
2022-01-24 16:08:09 +00:00
StrictSubnets = yes
${lib.optionalString (config.krebs.build.host.nets.retiolum.via != null) ''
LocalDiscovery = no
''}
2019-05-29 13:40:44 +00:00
'';
};
2016-03-15 13:00:55 +00:00
2022-01-24 16:08:09 +00:00
# never connect via gum (he eats our packets!)
krebs.hosts.gum.nets.retiolum.tinc.weight = 9000;
2016-03-15 13:00:55 +00:00
nixpkgs.config.packageOverrides = pkgs: {
tinc = pkgs.tinc_pre;
};
environment.systemPackages = [
pkgs.tinc
];
}