remove stuff
This commit is contained in:
@@ -66,7 +66,7 @@
|
|||||||
enableExtensionPack = true;
|
enableExtensionPack = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
networking.hostName = "cl-nb-01"; # Define your hostname.
|
networking.hostName = "ew-nb-01"; # Define your hostname.
|
||||||
networking.resolvconf.enable = true;
|
networking.resolvconf.enable = true;
|
||||||
networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
|
networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
|
||||||
networking.extraHosts = ''
|
networking.extraHosts = ''
|
||||||
@@ -118,19 +118,6 @@
|
|||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
services.postgresql = {
|
|
||||||
enable = true;
|
|
||||||
ensureUsers = [
|
|
||||||
{
|
|
||||||
name = "dominik";
|
|
||||||
ensurePermissions = {
|
|
||||||
"DATABASE \"zammad\"" = "ALL PRIVILEGES";
|
|
||||||
};
|
|
||||||
}
|
|
||||||
];
|
|
||||||
ensureDatabases = [ "zammad" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
system.stateVersion = "22.11"; # Did you read the comment?
|
system.stateVersion = "22.11"; # Did you read the comment?
|
||||||
|
|
||||||
security.polkit.enable = true;
|
security.polkit.enable = true;
|
||||||
@@ -151,20 +138,20 @@
|
|||||||
};
|
};
|
||||||
|
|
||||||
|
|
||||||
networking.firewall = {
|
# networking.firewall = {
|
||||||
allowedUDPPorts = [ 51820 ]; # Clients and peers can use the same port, see listenport
|
# allowedUDPPorts = [ 51820 ]; # Clients and peers can use the same port, see listenport
|
||||||
# if packets are still dropped, they will show up in dmesg
|
# # if packets are still dropped, they will show up in dmesg
|
||||||
logReversePathDrops = true;
|
# logReversePathDrops = true;
|
||||||
# wireguard trips rpfilter up
|
# # wireguard trips rpfilter up
|
||||||
extraCommands = ''
|
# extraCommands = ''
|
||||||
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
|
# ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
|
||||||
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
|
# ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
|
||||||
'';
|
# '';
|
||||||
extraStopCommands = ''
|
# extraStopCommands = ''
|
||||||
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
|
# ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
|
||||||
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
|
# ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
|
||||||
'';
|
# '';
|
||||||
};
|
# };
|
||||||
# networking.wireguard.interfaces = {
|
# networking.wireguard.interfaces = {
|
||||||
# wg0 = {
|
# wg0 = {
|
||||||
# # Determines the IP address and subnet of the client's end of the tunnel interface.
|
# # Determines the IP address and subnet of the client's end of the tunnel interface.
|
||||||
|
|||||||
Reference in New Issue
Block a user