diff options
| author | nin <nineinchnade@gmail.com> | 2017-09-29 19:11:43 +0200 |
|---|---|---|
| committer | nin <nineinchnade@gmail.com> | 2017-09-29 19:11:43 +0200 |
| commit | f4bf9110727f2c7113c80aaa88427b81605016ae (patch) | |
| tree | a56a491867eeb0deaca97c7ff272d563a026ec5c /lass/2configs/retiolum.nix | |
| parent | 7a7d085d33e1aa8e97f9f91d0fe53a1e378ce75e (diff) | |
| parent | 6dfe071664136790b7d62bf062e090722997372f (diff) | |
Merge branch 'master' of prism:stockholm
Diffstat (limited to 'lass/2configs/retiolum.nix')
| -rw-r--r-- | lass/2configs/retiolum.nix | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/lass/2configs/retiolum.nix b/lass/2configs/retiolum.nix index e7779f53e..fb76c5735 100644 --- a/lass/2configs/retiolum.nix +++ b/lass/2configs/retiolum.nix @@ -1,12 +1,14 @@ -{ pkgs, ... }: +{ config, pkgs, ... }: { krebs.iptables = { tables = { - filter.INPUT.rules = [ - { predicate = "-p tcp --dport tinc"; target = "ACCEPT"; } - { predicate = "-p udp --dport tinc"; target = "ACCEPT"; } + filter.INPUT.rules = let + tincport = toString config.krebs.build.host.nets.retiolum.tinc.port; + in [ + { predicate = "-p tcp --dport ${tincport}"; target = "ACCEPT"; } + { predicate = "-p udp --dport ${tincport}"; target = "ACCEPT"; } ]; }; }; |