nix-serve est disponible uniquement par tinc

2017-01-21 23:57:51 +01:00
parent ae4c1edee0
commit f0627eb800
1 changed files with 5 additions and 1 deletions
--- a/base/activation-manuelle/nix-serve-server.nix
+++ b/base/activation-manuelle/nix-serve-server.nix
@@ -19,9 +19,13 @@ mkIf cfg.nix-serve-server {
  # Réseau
  networking.firewall = {
    allowedTCPPorts = [
-      5000
+      #5000 # ouvert sur tinc
    ];
    allowedUDPPorts = [
    ];
+    extraCommands = ''
+      iptables  -A INPUT -i tinc.grudunet -p tcp --dport 5000 -j ACCEPT
+      ip6tables -A INPUT -i tinc.grudunet -p tcp --dport 5000 -j ACCEPT
+    '';
  };
 }