default: open retiolum ports

This commit is contained in:
lassulus 2023-12-12 13:09:09 +01:00
parent 6ce52ce8e1
commit 316e8431c2

View File

@ -9,6 +9,8 @@ with import ../../lib/pure.nix { inherit lib; };
krebs.announce-activation.enable = true;
krebs.enable = true;
krebs.tinc.retiolum.enable = mkDefault true;
networking.firewall.allowedTCPPorts = [ 655 ];
networking.firewall.allowedUDPPorts = [ 655 ];
# trust krebs ACME CA
krebs.ssl.trustIntermediate = true;