stockholm/lass/2configs/retiolum.nix
2015-09-30 15:20:13 +02:00

31 lines
545 B
Nix

{ ... }:
{
imports = [
../3modules/iptables.nix
];
lass.iptables = {
tables = {
filter.INPUT.rules = [
{ predicate = "-p tcp --dport smtp"; target = "ACCEPT"; }
{ predicate = "-p tcp --dport tinc"; target = "ACCEPT"; }
{ predicate = "-p udp --dport tinc"; target = "ACCEPT"; }
];
};
};
krebs.retiolum = {
enable = true;
hosts = ../../krebs/Zhosts;
connectTo = [
"fastpoke"
"cloudkrebs"
"echelon"
"pigstarter"
"gum"
"flap"
];
};
}