diff options
| -rw-r--r-- | hosts/vidhar/kimai/default.nix | 4 | ||||
| -rw-r--r-- | hosts/vidhar/network/ruleset.nft | 4 |
2 files changed, 5 insertions, 3 deletions
diff --git a/hosts/vidhar/kimai/default.nix b/hosts/vidhar/kimai/default.nix index 9c297b45..2c0e32f8 100644 --- a/hosts/vidhar/kimai/default.nix +++ b/hosts/vidhar/kimai/default.nix | |||
| @@ -31,9 +31,9 @@ | |||
| 31 | # } | 31 | # } |
| 32 | # ]; | 32 | # ]; |
| 33 | hostAddress = "192.168.52.113"; | 33 | hostAddress = "192.168.52.113"; |
| 34 | localAddress = "192.168.52.114"; | 34 | localAddress = "192.168.52.114/32"; |
| 35 | hostAddress6 = "2a03:4000:52:ada:6::1"; | 35 | hostAddress6 = "2a03:4000:52:ada:6::1"; |
| 36 | localAddress6 = "2a03:4000:52:ada:6::2"; | 36 | localAddress6 = "2a03:4000:52:ada:6::2/128"; |
| 37 | config = let hostConfig = config; in { config, pkgs, lib, ... }: { | 37 | config = let hostConfig = config; in { config, pkgs, lib, ... }: { |
| 38 | system.stateVersion = lib.mkIf hostConfig.containers."kimai".ephemeral config.system.nixos.release; | 38 | system.stateVersion = lib.mkIf hostConfig.containers."kimai".ephemeral config.system.nixos.release; |
| 39 | system.configurationRevision = lib.mkIf (flake ? rev) flake.rev; | 39 | system.configurationRevision = lib.mkIf (flake ? rev) flake.rev; |
diff --git a/hosts/vidhar/network/ruleset.nft b/hosts/vidhar/network/ruleset.nft index 5df73e2f..f7182c87 100644 --- a/hosts/vidhar/network/ruleset.nft +++ b/hosts/vidhar/network/ruleset.nft | |||
| @@ -156,7 +156,9 @@ table inet filter { | |||
| 156 | 156 | ||
| 157 | iifname lo counter name fw-lo accept | 157 | iifname lo counter name fw-lo accept |
| 158 | 158 | ||
| 159 | oifname { lan, @pppInterface@, bifrost } meta l4proto $icmp_protos jump forward_icmp_accept | 159 | iifname lan oifname { @pppInterface@, bifrost } meta l4proto $icmp_protos jump forward_icmp_accept |
| 160 | iifname bifrost oifname ve-kimai meta l4proto $icmp_protos jump forward_icmp_accept | ||
| 161 | iifname ve-kimai oifname bifrost meta l4proto $icmp_protos jump forward_icmp_accept | ||
| 160 | iifname lan oifname { @pppInterface@, bifrost } counter name fw-lan accept | 162 | iifname lan oifname { @pppInterface@, bifrost } counter name fw-lan accept |
| 161 | iifname ve-kimai oifname @pppInterface@ counter name fw-kimai accept | 163 | iifname ve-kimai oifname @pppInterface@ counter name fw-kimai accept |
| 162 | iifname podman0 ip saddr 10.88.0.5 oifname @pppInterface@ counter name fw-podman accept | 164 | iifname podman0 ip saddr 10.88.0.5 oifname @pppInterface@ counter name fw-podman accept |