Skynet/nixos
7
1
Fork 0
Code Issues 45 Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat: turned ulfm into a proper module

Browse source
This commit is contained in:
silver 2023-05-24 15:59:22 +01:00
parent 91a3eb6a1a
commit 34de735720
2 changed files with 97 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

33
machines/galatea.nix
View file

@ -17,17 +17,10 @@ let
ip_pub = "193.1.99.111";
ip_priv = "172.20.20.6";
hostname = "${name}.skynet.ie";
# dosent seem to be any otehr way to have it like read from a file
feck = "d9J4jDsJPuMPUMAAE4J4tH37HsmxEDze";
in {
imports = [
# general stuff for config
../applications/firewall.nix
../applications/dns.nix
# web stuff
../applications/nginx.nix
../applications/acme.nix
# specific to tis server
../applications/ulfm.nix
@ -41,25 +34,25 @@ in {
tags = [ "active" ];
};
# these two are to be able to add the rules for firewall and dns
# open the firewall for this
skynet_firewall.forward = [
"ip daddr ${ip_pub} tcp dport 80 counter packets 0 bytes 0 accept"
"ip daddr ${ip_pub} tcp dport 443 counter packets 0 bytes 0 accept"
"ip daddr ${ip_pub} tcp dport 8000 counter packets 0 bytes 0 accept"
];
skynet_dns.records = {
external = [
"${name} A ${ip_pub}"
];
cname = [
# this is also the stream server
#"stream CNAME ${name}"
"ulfm CNAME ${name}"
];
reverse = [
"${builtins.substring 9 3 ip_pub} IN PTR ${name}"
];
};
services.skynet_ulfm = {
enable = true;
host = {
# pass in teh ip (used for firewall)
ip = ip_pub;
# the name is used for dns
name = name;
};
};
}