From dfe1a3bb714cfec043b69011ac18972e5e35eaed Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Thu, 20 Aug 2026 20:47:55 +0200 Subject: ... --- hosts/vidhar/kimai/default.nix | 4 ++-- hosts/vidhar/network/ruleset.nft | 4 +++- 2 files changed, 5 insertions(+), 3 deletions(-) (limited to 'hosts') diff --git a/hosts/vidhar/kimai/default.nix b/hosts/vidhar/kimai/default.nix index 9c297b45..2c0e32f8 100644 --- a/hosts/vidhar/kimai/default.nix +++ b/hosts/vidhar/kimai/default.nix @@ -31,9 +31,9 @@ # } # ]; hostAddress = "192.168.52.113"; - localAddress = "192.168.52.114"; + localAddress = "192.168.52.114/32"; hostAddress6 = "2a03:4000:52:ada:6::1"; - localAddress6 = "2a03:4000:52:ada:6::2"; + localAddress6 = "2a03:4000:52:ada:6::2/128"; config = let hostConfig = config; in { config, pkgs, lib, ... }: { system.stateVersion = lib.mkIf hostConfig.containers."kimai".ephemeral config.system.nixos.release; system.configurationRevision = lib.mkIf (flake ? rev) flake.rev; diff --git a/hosts/vidhar/network/ruleset.nft b/hosts/vidhar/network/ruleset.nft index 5df73e2f..f7182c87 100644 --- a/hosts/vidhar/network/ruleset.nft +++ b/hosts/vidhar/network/ruleset.nft @@ -156,7 +156,9 @@ table inet filter { iifname lo counter name fw-lo accept - oifname { lan, @pppInterface@, bifrost } meta l4proto $icmp_protos jump forward_icmp_accept + iifname lan oifname { @pppInterface@, bifrost } meta l4proto $icmp_protos jump forward_icmp_accept + iifname bifrost oifname ve-kimai meta l4proto $icmp_protos jump forward_icmp_accept + iifname ve-kimai oifname bifrost meta l4proto $icmp_protos jump forward_icmp_accept iifname lan oifname { @pppInterface@, bifrost } counter name fw-lan accept iifname ve-kimai oifname @pppInterface@ counter name fw-kimai accept iifname podman0 ip saddr 10.88.0.5 oifname @pppInterface@ counter name fw-podman accept -- cgit v1.2.3