l prism.r: use iptables for hackerfleet

This commit is contained in:
lassulus 2018-04-20 23:30:19 +02:00
parent b067850740
commit e77030e772

View File

@ -110,29 +110,13 @@ in {
}; };
# TODO write function for proxy_pass (ssl/nonssl) # TODO write function for proxy_pass (ssl/nonssl)
services.nginx.virtualHosts."hackerfleet.de" = {
serverAliases = [ krebs.iptables.tables.filter.FORWARD.rules = [
"*.hackerfleet.de" { v6 = false; precedence = 1000; predicate = "-d 192.168.122.92"; target = "ACCEPT"; }
]; ];
locations."/".extraConfig = '' krebs.iptables.tables.nat.PREROUTING.rules = [
proxy_pass http://192.168.122.92:80; { v6 = false; precedence = 1000; predicate = "-d 46.4.114.243"; target = "DNAT --to-destination 192.168.122.92"; }
'';
};
services.nginx.virtualHosts."hackerfleet.de-s" = {
serverName = "hackerfleet.de";
listen = [
{
addr = "0.0.0.0";
port = 443;
}
]; ];
serverAliases = [
"*.hackerfleet.de"
];
locations."/".extraConfig = ''
proxy_pass http://192.168.122.92:443;
'';
};
} }
{ {
users.users.tv = { users.users.tv = {