Mic92/stockholm
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

tv: open ssh port by default

Browse Source
This commit is contained in:
tv 2016-02-01 17:40:25 +01:00
parent d6ded00d01
commit bb1dbae818
5 changed files with 5 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
tv/1systems/cd.nix
View File

@ -41,7 +41,6 @@ with lib;
tv.iptables = { tv.iptables = {
enable = true; enable = true;
input-internet-accept-new-tcp = [ input-internet-accept-new-tcp = [
"ssh"
"tinc" "tinc"
"smtp" "smtp"
"xmpp-client" "xmpp-client"
@ -58,10 +57,7 @@ with lib;
"cgit.cd.krebsco.de" "cgit.cd.krebsco.de"
"cgit.cd.viljetic.de" "cgit.cd.viljetic.de"
]; ];
}
{
# TODO make public_html also available to cd, cd.retiolum (AKA default) # TODO make public_html also available to cd, cd.retiolum (AKA default)
tv.iptables.input-internet-accept-new-tcp = singleton "http";
krebs.nginx.servers.public_html = { krebs.nginx.servers.public_html = {
server-names = singleton "cd.viljetic.de"; server-names = singleton "cd.viljetic.de";
locations = singleton (nameValuePair "~ ^/~(.+?)(/.*)?\$" '' locations = singleton (nameValuePair "~ ^/~(.+?)(/.*)?\$" ''

1
tv/1systems/nomic.nix
View File

@ -17,7 +17,6 @@ with lib;
tv.iptables = { tv.iptables = {
enable = true; enable = true;
input-internet-accept-new-tcp = [ input-internet-accept-new-tcp = [
"ssh"
"http" "http"
"tinc" "tinc"
"smtp" "smtp"

1
tv/1systems/wu.nix
View File

@ -129,7 +129,6 @@ with lib;
tv.iptables = { tv.iptables = {
enable = true; enable = true;
input-internet-accept-new-tcp = [ input-internet-accept-new-tcp = [
"ssh"
"http" "http"
"tinc" "tinc"
"smtp" "smtp"

1
tv/1systems/xu.nix
View File

@ -127,7 +127,6 @@ with lib;
tv.iptables = { tv.iptables = {
enable = true; enable = true;
input-internet-accept-new-tcp = [ input-internet-accept-new-tcp = [
"ssh"
"http" "http"
"tinc" "tinc"
"smtp" "smtp"

5
tv/2configs/default.nix
View File

@ -162,6 +162,10 @@ with lib;
}; };
} }
{
tv.iptables.enable = true;
}
{ {
services.openssh = { services.openssh = {
enable = true; enable = true;
@ -169,6 +173,7 @@ with lib;
{ type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; } { type = "ed25519"; path = "/etc/ssh/ssh_host_ed25519_key"; }
]; ];
}; };
tv.iptables.input-internet-accept-new-tcp = singleton "ssh";
} }
{ {