summaryrefslogtreecommitdiffstats
path: root/1systems
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2016-06-23 16:56:13 +0200
committermakefu <github@syntax-fehler.de>2016-06-23 16:56:13 +0200
commit91446c706a94295f5be55e55248307839534f635 (patch)
tree17ff9acf519fcfd09dde45712335a8f65decba71 /1systems
parentc204bc11c8ff2e773265a0aa32b8851ea4c3d69a (diff)
ma 1 darth: remove nat
Diffstat (limited to '1systems')
-rw-r--r--1systems/darth.nix12
1 files changed, 3 insertions, 9 deletions
diff --git a/1systems/darth.nix b/1systems/darth.nix
index 08ac7e66e..5f1d6e121 100644
--- a/1systems/darth.nix
+++ b/1systems/darth.nix
@@ -33,16 +33,10 @@ in {
firewall = {
allowPing = true;
logRefusedConnections = false;
- allowedUDPPorts = [ 80 655 67 ];
- allowedTCPPorts = [ 80 655 ];
- };
- nat = {
- enable = true;
- internalIPs = [ "10.8.10.0/24" ];
- #internalInterfaces = [ "tinc.siem" ];
- externalIP = "10.8.8.2";
- externalInterface = "virbr3";
+ allowedUDPPorts = [ 80 655 1655 67 ];
+ allowedTCPPorts = [ 80 655 1655 ];
};
+ # fallback connection to the internal virtual network
interfaces.virbr3.ip4 = [{
address = "10.8.8.2";
prefixLength = 24;