tv dnsmasq: listen only on configured interfaces

This commit is contained in:
tv 2020-06-03 00:46:03 +02:00
parent 6722c8b823
commit 6ad7a8801c

View File

@ -31,8 +31,9 @@ in {
}; };
services.dnsmasq.enable = true; services.dnsmasq.enable = true;
services.dnsmasq.extraConfig = '' services.dnsmasq.extraConfig = ''
bind-interfaces
dhcp-range=${cfg.dhcp-range} dhcp-range=${cfg.dhcp-range}
interface=${cfg.interface} listen-address=${cfg.address}
''; '';
tv.iptables.extra.filter.INPUT = [ tv.iptables.extra.filter.INPUT = [
"-i ${cfg.interface} -p tcp -m tcp --dport bootps -j ACCEPT" "-i ${cfg.interface} -p tcp -m tcp --dport bootps -j ACCEPT"