From 91446c706a94295f5be55e55248307839534f635 Mon Sep 17 00:00:00 2001
From: makefu <github@syntax-fehler.de>
Date: Thu, 23 Jun 2016 16:56:13 +0200
Subject: [PATCH] ma 1 darth: remove nat
---
1systems/darth.nix | 12 +++---------
1 file changed, 3 insertions(+), 9 deletions(-)
diff --git a/1systems/darth.nix b/1systems/darth.nix
index 08ac7e6..5f1d6e1 100644
--- a/1systems/darth.nix
+++ b/1systems/darth.nix
@@ -33,16 +33,10 @@ in {
firewall = {
allowPing = true;
logRefusedConnections = false;
- allowedUDPPorts = [ 80 655 67 ];
- allowedTCPPorts = [ 80 655 ];
- };
- nat = {
- enable = true;
- internalIPs = [ "10.8.10.0/24" ];
- #internalInterfaces = [ "tinc.siem" ];
- externalIP = "10.8.8.2";
- externalInterface = "virbr3";
+ allowedUDPPorts = [ 80 655 1655 67 ];
+ allowedTCPPorts = [ 80 655 1655 ];
};
+ # fallback connection to the internal virtual network
interfaces.virbr3.ip4 = [{
address = "10.8.8.2";
prefixLength = 24;