Bun/nixos-config
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add Intuos

Browse source
This commit is contained in:
Bun 2025-05-30 03:04:25 -04:00
parent ef3a258b17
commit 56a402c7db
5 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/home/programs/terminal/ssh/default.nix
View file

@ -7,6 +7,7 @@
matchBlocks = {
# Personal servers
tower.hostname = "4e4:535:9d47:f367:becd:6557:458d:5b1b";
intuos.hostname = "40e:404:a427:da33:163e:97b3:a2a3:9ed4";
jupiter.hostname = "5ce:969c:40d1:9575:f5e:591d:c377:a20b";
midas.hostname = "538:e163:87ba:f847:3646:18b6:6b01:d8f8";
kitty.hostname = "53f:dc2d:80c9:3ca2:4b15:ef4d:38a0:c868";

1
modules/system/devices/networking/mycelium/ips/default.nix
View file

@ -6,6 +6,7 @@
config.services.mycelium.ips = {
tower = "4e4:535:9d47:f367:becd:6557:458d:5b1b";
intuos = "40e:404:a427:da33:163e:97b3:a2a3:9ed4";
jupiter = "5ce:969c:40d1:9575:f5e:591d:c377:a20b";
midas = "538:e163:87ba:f847:3646:18b6:6b01:d8f8";
kitty = "53f:dc2d:80c9:3ca2:4b15:ef4d:38a0:c868";

2
modules/system/services/server/nfs/default.nix
View file

@ -5,7 +5,7 @@
config = lib.mkIf config.services.nfs.server.enable {
services.nfs.server.exports = "/storage *(rw)";
networking.firewall.extraInputRules = with config.services.mycelium.ips; ''
ip6 saddr { ${tower}, ${jupiter}, ${midas}, ${kitty}, ${prophet} } tcp dport 2049 accept
ip6 saddr { ${tower}, ${intuos}, ${jupiter}, ${midas}, ${kitty}, ${prophet} } tcp dport 2049 accept
'';
};
}

2
modules/system/services/server/nginx/rtmp/default.nix
View file

@ -24,7 +24,7 @@
'';
};
networking.firewall.extraInputRules = with config.services.mycelium.ips; ''
ip6 saddr { ${tower}, ${jupiter} } tcp dport 1935 accept
ip6 saddr { ${tower}, ${intuos}, ${jupiter} } tcp dport 1935 accept
ip saddr { ${config.secrets.ips.luna}, ${config.secrets.ips.corn} } tcp dport 1935 accept
'';
systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/var/www/landing-page/streams/hls/" ];

2
modules/system/services/server/owncast/default.nix
View file

@ -8,7 +8,7 @@
rtmp-port = 1945;
};
networking.firewall.extraInputRules = with config.services.mycelium.ips; ''
ip6 saddr { ${tower}, ${jupiter} } tcp dport 1935 accept
ip6 saddr { ${tower}, ${intuos}, ${jupiter} } tcp dport 1935 accept
'';
environment.persistence."/persist".directories = [ "/var/lib/owncast" ];
};