summaryrefslogtreecommitdiffstats
path: root/modules/tv/iptables/options.nix
diff options
context:
space:
mode:
authortv <tv@shackspace.de>2015-06-22 15:24:09 +0200
committertv <tv@shackspace.de>2015-06-22 15:24:09 +0200
commit53305dc496f7f15504a8ef2f1f9511fb0b2f78ab (patch)
tree273daca78a42d1f8d8ef4bd5ef6ea33598bfc618 /modules/tv/iptables/options.nix
parent1538630782ac8c56d549af4fcac4c9abcba8c9c5 (diff)
tv: modularize iptables configuration
Diffstat (limited to 'modules/tv/iptables/options.nix')
-rw-r--r--modules/tv/iptables/options.nix29
1 files changed, 29 insertions, 0 deletions
diff --git a/modules/tv/iptables/options.nix b/modules/tv/iptables/options.nix
new file mode 100644
index 000000000..79be1d08a
--- /dev/null
+++ b/modules/tv/iptables/options.nix
@@ -0,0 +1,29 @@
+{ lib, ... }:
+
+let
+ inherit (lib) mkOption types;
+in
+
+{
+ enable = mkOption {
+ type = types.bool;
+ default = false;
+ description = "Enable iptables.";
+ };
+
+ input-internet-accept-new-tcp = mkOption {
+ type = with types; listOf str;
+ default = [];
+ description = ''
+ ip{4,6}tables -A INPUT -j ACCEPT -p tcp --dport $port -m conntrack --ctstate NEW
+ '';
+ };
+
+ input-retiolum-accept-new-tcp = mkOption {
+ type = with types; listOf str;
+ default = [];
+ description = ''
+ ip{4,6}tables -A Retiolum -j ACCEPT -p tcp --dport $port -m conntrack --ctstate NEW
+ '';
+ };
+}