feat: allow services from home net

This commit is contained in:
oddlama 2025-01-20 15:36:51 +01:00
parent 37bf3d0db7
commit 23e21f4145
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
7 changed files with 29 additions and 13 deletions

View file

@ -179,8 +179,10 @@ in
# Deny access to all hosts by default.
"hosts deny" = "0.0.0.0/0";
# Allow access to local network and TODO: wireguard
"hosts allow" =
"${globals.net.home-lan.vlans.services.cidrv4} ${globals.net.home-lan.vlans.services.cidrv6}";
"hosts allow" = lib.concatStringsSep " " [
globals.net.home-lan.vlans.home.cidrv4
globals.net.home-lan.vlans.home.cidrv6
];
# Don't advertise inaccessible shares to users
"access based share enum" = "yes";