Skynet/nixos
7
1
Fork 0
Code Issues 45 Pull requests 1 Projects Releases Packages Wiki Activity Actions

feat: generating firewall forwarding rules from individual machiene configs complete

Browse source
This commit is contained in:
silver 2023-01-15 18:27:21 +00:00
parent c5f1bedec4
commit badcfe1ada
3 changed files with 27 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

10
applications/firewall.nix
View file

@ -16,6 +16,14 @@
A list of routes to forward
'';
};
# need to seperate it out as to not cause infinite loops
forward_parsed = lib.mkOption {
default = "";
type = lib.types.str;
description = ''
A list of routes to forward joined as a single string
'';
};
};
};
@ -69,7 +77,7 @@
# ip saddr 193.1.99.123 tcp dport 443 counter packets 0 bytes 0 accept
# can basically make each machiene responsibile for their own forwarding (in config at least)
${lib.strings.concatMapStrings (x: x + "\n") config.skynet_firewall.forward}
${config.skynet_firewall.forward_parsed}
counter packets 0 bytes 0 reject with icmp type admin-prohibited
}