l 2: add iodined.nix & import in prism
This commit is contained in:
parent
928ac9f153
commit
f9148e16d4
|
@ -23,6 +23,7 @@ in {
|
||||||
../2configs/buildbot-standalone.nix
|
../2configs/buildbot-standalone.nix
|
||||||
../2configs/repo-sync.nix
|
../2configs/repo-sync.nix
|
||||||
../2configs/binary-cache/server.nix
|
../2configs/binary-cache/server.nix
|
||||||
|
../2configs/iodined.nix
|
||||||
{
|
{
|
||||||
imports = [
|
imports = [
|
||||||
../2configs/git.nix
|
../2configs/git.nix
|
||||||
|
|
20
lass/2configs/iodined.nix
Normal file
20
lass/2configs/iodined.nix
Normal file
|
@ -0,0 +1,20 @@
|
||||||
|
{ pkgs, config, ... }:
|
||||||
|
|
||||||
|
let
|
||||||
|
# TODO: make this a parameter
|
||||||
|
domain = "io.lassul.us";
|
||||||
|
pw = import <secrets/iodinepw.nix>;
|
||||||
|
in {
|
||||||
|
|
||||||
|
services.iodined = {
|
||||||
|
enable = true;
|
||||||
|
domain = domain;
|
||||||
|
ip = "172.16.10.1/24";
|
||||||
|
extraConfig = "-P ${pw} -l ${config.krebs.build.host.nets.internet.ip4.addr}";
|
||||||
|
};
|
||||||
|
|
||||||
|
krebs.iptables.tables.filter.INPUT.rules = [
|
||||||
|
{ predicate = "-p udp --dport 54"; target = "ACCEPT";}
|
||||||
|
];
|
||||||
|
|
||||||
|
}
|
Loading…
Reference in a new issue