Cloonar/nixos
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add nat

Browse Source
This commit is contained in:
Dominik Polakovics Polakovics
2023-12-03 22:34:58 +01:00
parent 38d5a26e78
commit 70fd15c5dd
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/fw.cloonar.com/modules/firewall.nix
View File

@@ -137,7 +137,7 @@
# Setup NAT masquerading on external interfaces
chain postrouting {
type nat hook postrouting priority filter; policy accept;
oifname { "wan", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade
oifname { "wan", "server", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade
}
}
'';

4
hosts/fw.cloonar.com/modules/gitea.nix
View File

@@ -111,8 +111,8 @@ in
};
};
bindMounts = {
"${security.acme.certs.${domain}.directory}" = {
hostPath = "/var/lib/acme/gitea/";
"/var/lib/acme/gitea/" = {
hostPath = "${security.acme.certs.${domain}.directory}";
isReadOnly = true;
};
};