Cloonar/nixos
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

try to change fw

Browse Source
This commit is contained in:
Dominik Polakovics Polakovics
2023-12-04 11:33:51 +01:00
parent 8db9d3382e
commit ed14fb9b0e
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/fw.cloonar.com/modules/firewall.nix
View File

@@ -172,13 +172,13 @@
# multimedia airplay # multimedia airplay
iifname "multimedia" oifname { "lan" } counter accept iifname "multimedia" oifname { "lan" } counter accept
iifname { "vb-*" } oifname { "server" } counter accept comment "from internal interfaces"
# lan and vpn to any # lan and vpn to any
# TODO: disable wan when finished # TODO: disable wan when finished
iifname { "wan", "lan", "vb-*", "podman0", "wg_cloonar" } oifname { "lan", "vb-*", "podman0", "infrastructure", "multimedia", "smart", "wrwks", "wg_cloonar", "wg_epicenter", "wg_ghetto_at" } counter accept iifname { "wan", "lan", "vb-*", "podman0", "wg_cloonar" } oifname { "lan", "vb-*", "podman0", "infrastructure", "multimedia", "smart", "wrwks", "wg_cloonar", "wg_epicenter", "wg_ghetto_at" } counter accept
iifname { "infrastructure" } oifname { "podman0", "vb-omada" } counter accept iifname { "infrastructure" } oifname { "podman0", "vb-omada" } counter accept
iifname { "vb-*" } oifname { "server" } counter accept comment "from internal interfaces"
# Allow trusted network WAN access # Allow trusted network WAN access
iifname { iifname {
"lan", "lan",

1
hosts/fw.cloonar.com/modules/gitea.nix
View File

@@ -98,6 +98,7 @@ in
# }; # };
containers.gitea = { containers.gitea = {
extraFlags = [ "-U" ];
autoStart = true; autoStart = true;
ephemeral = true; ephemeral = true;
# macvlans = [ "vserver" ]; # macvlans = [ "vserver" ];