summaryrefslogtreecommitdiff
path: root/hosts/vidhar
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2022-03-15 18:35:41 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2022-03-15 18:35:41 +0100
commit6a0fd12cf07df4ee54643f64d34438ce03869a5e (patch)
treef0c77d48e71247dd878bdc4cf0e0a5e99f9bc9e4 /hosts/vidhar
parentf95928a0ba0bdd5d66bae0ead8d64d78c73e6057 (diff)
downloadnixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.tar
nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.tar.gz
nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.tar.bz2
nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.tar.xz
nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.zip
yggdrasil-wg: dns
Diffstat (limited to 'hosts/vidhar')
-rw-r--r--hosts/vidhar/dns/default.nix4
-rw-r--r--hosts/vidhar/network/ruleset.nft4
2 files changed, 6 insertions, 2 deletions
diff --git a/hosts/vidhar/dns/default.nix b/hosts/vidhar/dns/default.nix
index b1457a7a..caaa8e15 100644
--- a/hosts/vidhar/dns/default.nix
+++ b/hosts/vidhar/dns/default.nix
@@ -82,6 +82,10 @@ in {
82 listen: 127.0.0.1@5353 82 listen: 127.0.0.1@5353
83 listen: ::1@5353 83 listen: ::1@5353
84 84
85 listen: 10.141.1.1@53
86 listen: 10.141.2.1@53
87 listen: 2a03:4000:52:ada:1:1::@53
88
85 acl: 89 acl:
86 - id: local_acl 90 - id: local_acl
87 key: local_key 91 key: local_key
diff --git a/hosts/vidhar/network/ruleset.nft b/hosts/vidhar/network/ruleset.nft
index 0f591f24..4e8341e9 100644
--- a/hosts/vidhar/network/ruleset.nft
+++ b/hosts/vidhar/network/ruleset.nft
@@ -165,8 +165,8 @@ table inet filter {
165 iifname { lan, mgmt, dsl, yggdrasil, bifrost } tcp dport 22 counter name ssh-rx accept 165 iifname { lan, mgmt, dsl, yggdrasil, bifrost } tcp dport 22 counter name ssh-rx accept
166 iifname { lan, mgmt, dsl, yggdrasil, bifrost } udp dport 60001-61000 counter name mosh-rx accept 166 iifname { lan, mgmt, dsl, yggdrasil, bifrost } udp dport 60001-61000 counter name mosh-rx accept
167 167
168 iifname { lan, mgmt, dmz01 } tcp dport 53 counter name dns-rx accept 168 iifname { lan, mgmt, dmz01, yggdrasil } tcp dport 53 counter name dns-rx accept
169 iifname { lan, mgmt, dmz01 } udp dport 53 counter name dns-rx accept 169 iifname { lan, mgmt, dmz01, yggdrasil } udp dport 53 counter name dns-rx accept
170 170
171 iifname { lan, mgmt, dsl } meta protocol ip udp dport 51820 counter name wg-rx accept 171 iifname { lan, mgmt, dsl } meta protocol ip udp dport 51820 counter name wg-rx accept
172 iifname { lan, mgmt, dsl } meta protocol ip6 udp dport 51821 counter name wg-rx accept 172 iifname { lan, mgmt, dsl } meta protocol ip6 udp dport 51821 counter name wg-rx accept