Bun/nixos-config
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update all to mycelium ips

Browse source
This commit is contained in:
Bun 2025-05-29 23:29:05 -04:00
parent 200bf7e711
commit 48b55af695
10 changed files with 40 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/system/services/general/ssh/fail2ban/default.nix
View file

@ -4,7 +4,6 @@
enable = true;
maxretry = 5;
bantime = "10m";
ignoreIP = [ "11.0.0.0/8" ];
};
environment.persistence."/persist".directories = [ "/var/lib/fail2ban" ];

4
modules/system/services/server/nfs/default.nix
View file

@ -4,6 +4,8 @@
config = lib.mkIf config.services.nfs.server.enable {
services.nfs.server.exports = "/storage *(rw)";
networking.firewall.extraInputRules = "ip saddr { 10.0.0.0/8, 11.0.0.0/8, ${config.secrets.ips.bun} } tcp dport 2049 accept";
networking.firewall.extraInputRules = with config.services.mycelium.ips; ''
ip6 saddr { ${tower}, ${midas}, ${kitty}, ${prophet} } tcp dport 2049 accept
'';
};
}

5
modules/system/services/server/nginx/rtmp/default.nix
View file

@ -23,7 +23,10 @@
}
'';
};
networking.firewall.extraInputRules = "ip saddr { 11.0.0.0/8, ${config.secrets.ips.luna}, ${config.secrets.ips.corn} } tcp dport 1935 accept";
networking.firewall.extraInputRules = with config.services.mycelium.ips; ''
ip6 saddr ${tower} tcp dport 1935 accept
ip saddr { ${config.secrets.ips.luna}, ${config.secrets.ips.corn} } tcp dport 1935 accept
'';
systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/var/www/landing-page/streams/hls/" ];
};
}

4
modules/system/services/server/owncast/default.nix
View file

@ -7,7 +7,9 @@
port = 8060;
rtmp-port = 1945;
};
networking.firewall.extraInputRules = "ip saddr 11.0.0.0/8 tcp dport 1945 accept";
networking.firewall.extraInputRules = ''
ip6 saddr ${tower} tcp dport 1935 accept
'';
environment.persistence."/persist".directories = [ "/var/lib/owncast" ];
};
}