summaryrefslogtreecommitdiffstats
path: root/mb/2configs/retiolum.nix
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2019-04-28 14:54:55 +0200
committertv <tv@krebsco.de>2019-04-28 14:54:55 +0200
commit1040fa21a577128c7cb826a1e2bb57c448eb6d24 (patch)
tree2b10e15fb48e98ff819eebf0eaf4e995d53cdfed /mb/2configs/retiolum.nix
parent2124814a04c4052f73c935927931c85812421c43 (diff)
parent915e4b843790d3e71bdccea124d4832ca042e456 (diff)
Merge remote-tracking branch 'prism/master'
Diffstat (limited to 'mb/2configs/retiolum.nix')
-rw-r--r--mb/2configs/retiolum.nix33
1 files changed, 33 insertions, 0 deletions
diff --git a/mb/2configs/retiolum.nix b/mb/2configs/retiolum.nix
new file mode 100644
index 000000000..5a87d52af
--- /dev/null
+++ b/mb/2configs/retiolum.nix
@@ -0,0 +1,33 @@
+{ config, pkgs, ... }:
+
+{
+
+ krebs.iptables = {
+ tables = {
+ filter.INPUT.rules = let
+ tincport = toString config.krebs.build.host.nets.retiolum.tinc.port;
+ in [
+ { predicate = "-p tcp --dport ${tincport}"; target = "ACCEPT"; }
+ { predicate = "-p udp --dport ${tincport}"; target = "ACCEPT"; }
+ ];
+ };
+ };
+
+ krebs.tinc.retiolum = {
+ enableLegacy = true;
+ enable = true;
+ connectTo = [
+ "prism"
+ "gum"
+ "ni"
+ ];
+ };
+
+ nixpkgs.config.packageOverrides = pkgs: {
+ tinc = pkgs.tinc_pre;
+ };
+
+ environment.systemPackages = [
+ pkgs.tinc
+ ];
+}