diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-03-15 18:35:41 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-03-15 18:35:41 +0100 |
| commit | 6a0fd12cf07df4ee54643f64d34438ce03869a5e (patch) | |
| tree | f0c77d48e71247dd878bdc4cf0e0a5e99f9bc9e4 /hosts/vidhar | |
| parent | f95928a0ba0bdd5d66bae0ead8d64d78c73e6057 (diff) | |
| download | nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.tar nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.tar.gz nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.tar.bz2 nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.tar.xz nixos-6a0fd12cf07df4ee54643f64d34438ce03869a5e.zip | |
yggdrasil-wg: dns
Diffstat (limited to 'hosts/vidhar')
| -rw-r--r-- | hosts/vidhar/dns/default.nix | 4 | ||||
| -rw-r--r-- | hosts/vidhar/network/ruleset.nft | 4 |
2 files changed, 6 insertions, 2 deletions
diff --git a/hosts/vidhar/dns/default.nix b/hosts/vidhar/dns/default.nix index b1457a7a..caaa8e15 100644 --- a/hosts/vidhar/dns/default.nix +++ b/hosts/vidhar/dns/default.nix | |||
| @@ -82,6 +82,10 @@ in { | |||
| 82 | listen: 127.0.0.1@5353 | 82 | listen: 127.0.0.1@5353 |
| 83 | listen: ::1@5353 | 83 | listen: ::1@5353 |
| 84 | 84 | ||
| 85 | listen: 10.141.1.1@53 | ||
| 86 | listen: 10.141.2.1@53 | ||
| 87 | listen: 2a03:4000:52:ada:1:1::@53 | ||
| 88 | |||
| 85 | acl: | 89 | acl: |
| 86 | - id: local_acl | 90 | - id: local_acl |
| 87 | key: local_key | 91 | key: local_key |
diff --git a/hosts/vidhar/network/ruleset.nft b/hosts/vidhar/network/ruleset.nft index 0f591f24..4e8341e9 100644 --- a/hosts/vidhar/network/ruleset.nft +++ b/hosts/vidhar/network/ruleset.nft | |||
| @@ -165,8 +165,8 @@ table inet filter { | |||
| 165 | iifname { lan, mgmt, dsl, yggdrasil, bifrost } tcp dport 22 counter name ssh-rx accept | 165 | iifname { lan, mgmt, dsl, yggdrasil, bifrost } tcp dport 22 counter name ssh-rx accept |
| 166 | iifname { lan, mgmt, dsl, yggdrasil, bifrost } udp dport 60001-61000 counter name mosh-rx accept | 166 | iifname { lan, mgmt, dsl, yggdrasil, bifrost } udp dport 60001-61000 counter name mosh-rx accept |
| 167 | 167 | ||
| 168 | iifname { lan, mgmt, dmz01 } tcp dport 53 counter name dns-rx accept | 168 | iifname { lan, mgmt, dmz01, yggdrasil } tcp dport 53 counter name dns-rx accept |
| 169 | iifname { lan, mgmt, dmz01 } udp dport 53 counter name dns-rx accept | 169 | iifname { lan, mgmt, dmz01, yggdrasil } udp dport 53 counter name dns-rx accept |
| 170 | 170 | ||
| 171 | iifname { lan, mgmt, dsl } meta protocol ip udp dport 51820 counter name wg-rx accept | 171 | iifname { lan, mgmt, dsl } meta protocol ip udp dport 51820 counter name wg-rx accept |
| 172 | iifname { lan, mgmt, dsl } meta protocol ip6 udp dport 51821 counter name wg-rx accept | 172 | iifname { lan, mgmt, dsl } meta protocol ip6 udp dport 51821 counter name wg-rx accept |