nixos-template-base/base/activation-manuelle/nix-serve-server.nix

{ config, lib, pkgs, ... }:

let
  inherit (lib) mkIf mkMerge mkThenElse;
  cfg = config.r6d.config-generator;
  computers = config.r6d.computers;
  profiles = config.r6d.profiles;
in

mkIf cfg.nix-serve-server {

  # Cache http pour le store

  # Services
  services.nix-serve = {
    enable = true;
  };

  # Réseau
  networking.firewall = {
    allowedTCPPorts = [
      #5000 # ouvert sur tinc
    ];
    allowedUDPPorts = [
    ];
    extraCommands = ''
      iptables  -A INPUT -i tinc.grudunet -p tcp --dport 5000 -j ACCEPT
      ip6tables -A INPUT -i tinc.grudunet -p tcp --dport 5000 -j ACCEPT
    '';
  };
}