stockholm/lass/2configs/iodined.nix

21 lines
427 B
Nix
Raw Normal View History

2016-09-12 22:04:48 +00:00
{ pkgs, config, ... }:
let
# TODO: make this a parameter
domain = "io.lassul.us";
pw = import <secrets/iodinepw.nix>;
in {
services.iodined = {
enable = true;
domain = domain;
ip = "172.16.10.1/24";
2016-10-01 00:16:47 +00:00
extraConfig = "-c -P ${pw} -l ${config.krebs.build.host.nets.internet.ip4.addr}";
2016-09-12 22:04:48 +00:00
};
krebs.iptables.tables.filter.INPUT.rules = [
{ predicate = "-p udp --dport 54"; target = "ACCEPT";}
];
}