lass.pds.lassul.us / superconfig
This repository has no description
0
Fork 1

Configure Feed

Select the types of activity you want to include in your feed.

move ssh-redirect to it's own config file

author
lassulus date (Feb 2, 2024, 5:26 AM CET) commit e8f3d548 parent 9d200617
+18 -9
-9
2configs/default.nix
··· 226 226 krebs.iptables = { 227 227 enable = true; 228 228 tables = { 229 - nat.PREROUTING.rules = [ 230 - { predicate = "-i retiolum -p tcp -m tcp --dport 22"; target = "ACCEPT"; } 231 - { predicate = "-i wiregrill -p tcp -m tcp --dport 22"; target = "ACCEPT"; } 232 - { predicate = "-p tcp -m tcp --dport 22"; target = "REDIRECT --to-ports 0"; } 233 - { predicate = "-p tcp -m tcp --dport 45621"; target = "REDIRECT --to-ports 22"; } 234 - ]; 235 - nat.OUTPUT.rules = [ 236 - { predicate = "-o lo -p tcp -m tcp --dport 45621"; target = "REDIRECT --to-ports 22"; } 237 - ]; 238 229 filter.INPUT.policy = "DROP"; 239 230 filter.FORWARD.policy = "DROP"; 240 231 filter.INPUT.rules = lib.mkMerge [
+16
2configs/ssh-redirect.nix
··· 1 + { 2 + krebs.iptables = { 3 + enable = true; 4 + tables = { 5 + nat.PREROUTING.rules = [ 6 + { predicate = "-i retiolum -p tcp -m tcp --dport 22"; target = "ACCEPT"; } 7 + { predicate = "-i wiregrill -p tcp -m tcp --dport 22"; target = "ACCEPT"; } 8 + { predicate = "-p tcp -m tcp --dport 22"; target = "REDIRECT --to-ports 0"; } 9 + { predicate = "-p tcp -m tcp --dport 45621"; target = "REDIRECT --to-ports 22"; } 10 + ]; 11 + nat.OUTPUT.rules = [ 12 + { predicate = "-o lo -p tcp -m tcp --dport 45621"; target = "REDIRECT --to-ports 22"; } 13 + ]; 14 + }: 15 + }; 16 + }
+1
machines/neoprism/config.nix
··· 2 2 3 3 { 4 4 imports = [ 5 + ../../2configs/ssh-redirect.nis 5 6 ../../2configs/retiolum.nix 6 7 ../../2configs/mail/internet-gateway.nix 7 8 ../../2configs/binary-cache/server.nix
+1
machines/prism/config.nix
··· 5 5 system.stateVersion = "23.05"; 6 6 imports = [ 7 7 ./backup.nix 8 + ../../2configs/ssh-redirect.nis 8 9 ../../2configs/retiolum.nix 9 10 ../../2configs/libvirt.nix 10 11 ../../2configs/websites/lassulus.nix