This repository has no description
retiolum: simplify config, connect to neoprism
author
lassulus
date
(Jan 8, 2024, 9:56 PM CET)
commit
0ac1c78c
0ac1c78c76e0c8a0b8614c9036116a04056aeb0b
parent
0406acec
0406acec4a30f6128230ba0289f1e071095d57d5
+5
-15
+5
-15
2configs/retiolum.nix
+5
-15
2configs/retiolum.nix
···
2
2
3
3
{
4
4
5
-
krebs.iptables = {
6
-
tables = {
7
-
filter.INPUT.rules = let
8
-
tincport = toString config.krebs.build.host.nets.retiolum.tinc.port;
9
-
in [
10
-
{ predicate = "-p tcp --dport ${tincport}"; target = "ACCEPT"; }
11
-
{ predicate = "-p udp --dport ${tincport}"; target = "ACCEPT"; }
12
-
];
13
-
};
14
-
};
5
+
networking.firewall.allowedTCPPorts = [ 655 ];
6
+
networking.firewall.allowedUDPPorts = [ 655 ];
15
7
16
8
krebs.tinc.retiolum = {
17
9
enable = true;
18
10
connectTo = [
11
+
"neoprism"
19
12
"prism"
20
13
"ni"
21
14
"eve"
22
15
];
23
16
extraConfig = ''
24
-
AutoConnect = no
25
-
${lib.optionalString (config.krebs.build.host.nets.retiolum.via != null) ''
26
-
LocalDiscovery = no
27
-
''}
17
+
AutoConnect = yes
18
+
LocalDiscovery = yes
28
19
'';
29
20
tincUp = lib.mkIf config.systemd.network.enable "";
30
21
privkey = "${config.krebs.secret.directory}/retiolum.rsa_key.priv";
···
56
47
RequiredForOnline = "no";
57
48
};
58
49
networkConfig = {
59
-
IgnoreCarrierLoss = "10s";
60
50
LinkLocalAddressing = "no";
61
51
};
62
52
};