uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(vesuvio): configure firewall correctly

Browse source
This commit is contained in:
uku 2024-07-18 11:11:54 +02:00
parent e91330263b
commit fcc5ebb7ba
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
1 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
systems/vesuvio/default.nix
View file

@ -2,7 +2,7 @@
boot.tmp.cleanOnBoot = true; boot.tmp.cleanOnBoot = true;
zramSwap.enable = true; zramSwap.enable = true;
services.openssh.openFirewall = true; services.openssh.ports = [4269];
services.frp = { services.frp = {
enable = true; enable = true;
@ -18,4 +18,14 @@
age.secrets.frpToken.file = ../../secrets/etna/frpToken.age; age.secrets.frpToken.file = ../../secrets/etna/frpToken.age;
systemd.services.frp.serviceConfig.EnvironmentFile = config.age.secrets.frpToken.path; systemd.services.frp.serviceConfig.EnvironmentFile = config.age.secrets.frpToken.path;
networking.firewall = {
allowedTCPPorts = [22]; # forgejo-ssh
allowedTCPPortRanges = [
{
from = 6000;
to = 7000;
}
];
};
} }