diff options
author | makefu <github@syntax-fehler.de> | 2023-09-28 23:22:59 +0200 |
---|---|---|
committer | makefu <github@syntax-fehler.de> | 2023-09-28 23:22:59 +0200 |
commit | 2db6777b7caa37477c5ffddd99d69b2f2c6d9d7f (patch) | |
tree | a72905fad73089b7ab295a948eda837bad013362 /tv/2configs/sshd.nix | |
parent | 29d72c898d674d2c18fc0f4a76b5e623de0c3dfe (diff) | |
parent | 0215fbddccf206801d94f52518cbfec91ccc3cc5 (diff) |
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'tv/2configs/sshd.nix')
-rw-r--r-- | tv/2configs/sshd.nix | 27 |
1 files changed, 0 insertions, 27 deletions
diff --git a/tv/2configs/sshd.nix b/tv/2configs/sshd.nix deleted file mode 100644 index 59c95ccba..000000000 --- a/tv/2configs/sshd.nix +++ /dev/null @@ -1,27 +0,0 @@ -with import ./lib; -{ config, ... }: let - cfg.host = config.krebs.build.host; - nets = - optional (cfg.host.nets?retiolum) cfg.host.nets.retiolum ++ - optional (cfg.host.nets?wiregrill) cfg.host.nets.wiregrill; -in { - services.openssh = { - enable = true; - }; - tv.iptables.input-internet-accept-tcp = singleton "ssh"; - tv.iptables.extra.nat.OUTPUT = [ - "-o lo -p tcp --dport 11423 -j REDIRECT --to-ports 22" - ]; - tv.iptables.extra4.nat.PREROUTING = - map - (net: "-d ${net.ip4.addr} -p tcp --dport 22 -j ACCEPT") - (filter (net: net.ip4 != null) nets); - tv.iptables.extra6.nat.PREROUTING = - map - (net: "-d ${net.ip6.addr} -p tcp --dport 22 -j ACCEPT") - (filter (net: net.ip6 != null) nets); - tv.iptables.extra.nat.PREROUTING = [ - "-p tcp --dport 22 -j REDIRECT --to-ports 0" - "-p tcp --dport 11423 -j REDIRECT --to-ports 22" - ]; -} |