Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

m 1 gum:update firewall

Browse Source
This commit is contained in:
makefu 2015-11-10 18:53:31 +01:00
parent 94a394539d
commit b394c79051
1 changed files with 23 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
makefu/1systems/gum.nix
View File

@ -13,18 +13,36 @@ in {
# ../2configs/iodined.nix # ../2configs/iodined.nix
]; ];
boot.loader.grub.device = "/dev/sda";
boot.loader.grub.splashImage = null;
boot.initrd.availableKernelModules = [ "pata_via" "uhci_hcd" ];
boot.kernelModules = [ "kvm-intel" ];
krebs.build.target = "root@gum.krebsco.de"; krebs.build.target = "root@gum.krebsco.de";
krebs.build.host = config.krebs.hosts.gum; krebs.build.host = config.krebs.hosts.gum;
# Hardware
boot.loader.grub.device = "/dev/sda";
boot.initrd.availableKernelModules = [ "pata_via" "uhci_hcd" ];
boot.kernelModules = [ "kvm-intel" ];
# Network
services.udev.extraRules = '' services.udev.extraRules = ''
SUBSYSTEM=="net", ATTR{address}=="c8:0a:a9:c8:ee:dd", NAME="et0" SUBSYSTEM=="net", ATTR{address}=="c8:0a:a9:c8:ee:dd", NAME="et0"
''; '';
networking = { networking = {
firewall.allowPing = true; firewall = {
allowPing = true;
allowedTCPPorts = [
# smtp
25
# http
80 443
# tinc
655
];
allowedUDPPorts = [
# tinc
655 53
];
};
interfaces.et0.ip4 = [{ interfaces.et0.ip4 = [{
address = external-ip; address = external-ip;
prefixLength = 24; prefixLength = 24;