summaryrefslogtreecommitdiffstats
path: root/tv/2configs/sshd.nix
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2023-09-28 23:22:59 +0200
committermakefu <github@syntax-fehler.de>2023-09-28 23:22:59 +0200
commit2db6777b7caa37477c5ffddd99d69b2f2c6d9d7f (patch)
treea72905fad73089b7ab295a948eda837bad013362 /tv/2configs/sshd.nix
parent29d72c898d674d2c18fc0f4a76b5e623de0c3dfe (diff)
parent0215fbddccf206801d94f52518cbfec91ccc3cc5 (diff)
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'tv/2configs/sshd.nix')
-rw-r--r--tv/2configs/sshd.nix27
1 files changed, 0 insertions, 27 deletions
diff --git a/tv/2configs/sshd.nix b/tv/2configs/sshd.nix
deleted file mode 100644
index 59c95ccba..000000000
--- a/tv/2configs/sshd.nix
+++ /dev/null
@@ -1,27 +0,0 @@
-with import ./lib;
-{ config, ... }: let
- cfg.host = config.krebs.build.host;
- nets =
- optional (cfg.host.nets?retiolum) cfg.host.nets.retiolum ++
- optional (cfg.host.nets?wiregrill) cfg.host.nets.wiregrill;
-in {
- services.openssh = {
- enable = true;
- };
- tv.iptables.input-internet-accept-tcp = singleton "ssh";
- tv.iptables.extra.nat.OUTPUT = [
- "-o lo -p tcp --dport 11423 -j REDIRECT --to-ports 22"
- ];
- tv.iptables.extra4.nat.PREROUTING =
- map
- (net: "-d ${net.ip4.addr} -p tcp --dport 22 -j ACCEPT")
- (filter (net: net.ip4 != null) nets);
- tv.iptables.extra6.nat.PREROUTING =
- map
- (net: "-d ${net.ip6.addr} -p tcp --dport 22 -j ACCEPT")
- (filter (net: net.ip6 != null) nets);
- tv.iptables.extra.nat.PREROUTING = [
- "-p tcp --dport 22 -j REDIRECT --to-ports 0"
- "-p tcp --dport 11423 -j REDIRECT --to-ports 22"
- ];
-}