sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(core): add nixos-nftables-firewall; and move some things from core/default.nix to more approriate locations

Browse source
This commit is contained in:
oddlama 2023-04-16 00:34:35 +02:00
parent 2e45d3f423
commit 12d840c7bf
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
9 changed files with 92 additions and 93 deletions
Download patch file Download diff file Expand all files Collapse all files

7
modules/wireguard.nix
View file

@ -102,9 +102,10 @@
# The allowed ips of a server node are it's own addreses,
# plus each external peer's addresses,
# plus each client's addresses that is connected via that node.
AllowedIPs =
snCfg.addresses
++ attrValues snCfg.server.externalPeers; # TODO ++ map (n: (wgCfgOf n).addresses) snCfg.ourClientNodes;
AllowedIPs = snCfg.addresses;
# TODO this needed? or even wanted at all?
# ++ attrValues snCfg.server.externalPeers;
# ++ map (n: (wgCfgOf n).addresses) snCfg.ourClientNodes;
Endpoint = "${snCfg.server.host}:${toString snCfg.server.port}";
};
}) (filterSelf associatedServerNodes)