forked from mirrors_public/oddlama_nix-config
feat: automatically generate allowedTCPPorts for mdns enabled
interfaces; simplify nftables rules by adding a general untrusted zone
This commit is contained in:
parent
e37601b486
commit
41df399bb6
14 changed files with 231 additions and 168 deletions
19
flake.nix
19
flake.nix
|
@ -89,19 +89,16 @@
|
|||
|
||||
stateVersion = "23.05";
|
||||
|
||||
hosts = {
|
||||
nom = {
|
||||
hosts = let
|
||||
nixos = system: {
|
||||
type = "nixos";
|
||||
system = "x86_64-linux";
|
||||
};
|
||||
ward = {
|
||||
type = "nixos";
|
||||
system = "x86_64-linux";
|
||||
};
|
||||
zackbiene = {
|
||||
type = "nixos";
|
||||
system = "aarch64-linux";
|
||||
inherit system;
|
||||
};
|
||||
in {
|
||||
nom = nixos "x86_64-linux";
|
||||
#sentinel = nixos "x86_64-linux";
|
||||
ward = nixos "x86_64-linux";
|
||||
zackbiene = nixos "aarch64-linux";
|
||||
};
|
||||
|
||||
colmena = import ./nix/colmena.nix inputs;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue