Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

l 2 hfos: restart iptables after libvirtd restart

Browse Source
This commit is contained in:
lassulus 2017-03-10 15:35:24 +01:00
parent 3b45f3f791
commit 55c05c18c7
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
lass/2configs/hfos.nix
View File

@ -36,5 +36,12 @@ with import <stockholm/lib>;
{ v6 = false; precedence = 1000; predicate = "-d 213.239.205.246 -p tcp --dport 443"; target = "DNAT --to-destination 192.168.122.208:1443"; }
];
systemd.services.krebs-iptables.after = [ "libvirtd.service" ];
# TODO use bridge interfaces instead of this crap
systemd.services.libvirtd.serviceConfig.ExecStartPost = let
restart-iptables = pkgs.writeDash "restart-iptables" ''
#soo hacky
${pkgs.coreutils}/bin/sleep 1s
${pkgs.systemd}/bin/systemctl restart krebs-iptables.service
'';
in restart-iptables;
}