Bun/nixos-config
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fuck that tables malarky this works

Browse source
This commit is contained in:
Bun 2025-03-18 06:25:55 -04:00
parent d3a7fe8158
commit 77c2076bbd
3 changed files with 3 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

10
modules/system/services/server/fileserver/nfs/default.nix
View file

@ -11,14 +11,6 @@
/storage/Music *(rw,sync,no_subtree_check) /storage/Music *(rw,sync,no_subtree_check)
''; '';
}; };
networking.nftables.tables.nfs = { networking.firewall.extraInputRules = "ip saddr 10.0.0.0/8 tcp dport 2049 accept";
family = "inet";
content = ''
chain input {
type filter hook input priority filter; policy drop;
ip saddr 10.0.0.0/8 tcp dport 2049 accept comment "Accept NFS"
}
'';
};
}; };
} }

10
modules/system/services/server/nginx/rtmp/default.nix
View file

@ -25,15 +25,7 @@
} }
''; '';
}; };
networking.nftables.tables.rtmp = { networking.firewall.extraInputRules = "ip saddr { 10.0.0.0/8, ${config.secrets.ips.luna}, ${config.secrets.ips.corn} } tcp dport 1935 accept";
family = "inet";
content = ''
chain input {
type filter hook input priority 0; policy drop;
ip saddr { 10.0.0.0/8, ${config.secrets.ips.luna}, ${config.secrets.ips.corn} } tcp dport 1935 accept comment "Accept RTMP"
}
'';
};
systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/var/www/landing-page/streams/hls/" ]; systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/var/www/landing-page/streams/hls/" ];
}; };
} }

10
modules/system/services/server/owncast/default.nix
View file

@ -7,15 +7,7 @@
port = 8060; port = 8060;
rtmp-port = 1945; rtmp-port = 1945;
}; };
networking.nftables.tables.owncast = { networking.firewall.extraInputRules = "ip saddr 10.0.0.0/8 tcp dport 1945 accept";
family = "inet";
content = ''
chain input {
type filter hook input priority filter; policy drop;
ip saddr 10.0.0.0/8 tcp dport 1945 accept comment "Accept RTMP"
}
'';
};
environment.persistence."/persist".directories = [ "/var/lib/owncast" ]; environment.persistence."/persist".directories = [ "/var/lib/owncast" ];
}; };
} }