l prism.r: use iptables for hackerfleet
This commit is contained in:
parent
b067850740
commit
e77030e772
@ -110,29 +110,13 @@ in {
|
|||||||
};
|
};
|
||||||
|
|
||||||
# TODO write function for proxy_pass (ssl/nonssl)
|
# TODO write function for proxy_pass (ssl/nonssl)
|
||||||
services.nginx.virtualHosts."hackerfleet.de" = {
|
|
||||||
serverAliases = [
|
krebs.iptables.tables.filter.FORWARD.rules = [
|
||||||
"*.hackerfleet.de"
|
{ v6 = false; precedence = 1000; predicate = "-d 192.168.122.92"; target = "ACCEPT"; }
|
||||||
];
|
];
|
||||||
locations."/".extraConfig = ''
|
krebs.iptables.tables.nat.PREROUTING.rules = [
|
||||||
proxy_pass http://192.168.122.92:80;
|
{ v6 = false; precedence = 1000; predicate = "-d 46.4.114.243"; target = "DNAT --to-destination 192.168.122.92"; }
|
||||||
'';
|
|
||||||
};
|
|
||||||
services.nginx.virtualHosts."hackerfleet.de-s" = {
|
|
||||||
serverName = "hackerfleet.de";
|
|
||||||
listen = [
|
|
||||||
{
|
|
||||||
addr = "0.0.0.0";
|
|
||||||
port = 443;
|
|
||||||
}
|
|
||||||
];
|
];
|
||||||
serverAliases = [
|
|
||||||
"*.hackerfleet.de"
|
|
||||||
];
|
|
||||||
locations."/".extraConfig = ''
|
|
||||||
proxy_pass http://192.168.122.92:443;
|
|
||||||
'';
|
|
||||||
};
|
|
||||||
}
|
}
|
||||||
{
|
{
|
||||||
users.users.tv = {
|
users.users.tv = {
|
||||||
|
Loading…
Reference in New Issue
Block a user