dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions

secure munin-node with firewall

Browse source
This commit is contained in:
Tim Schubert 2024-03-23 19:43:39 +01:00
parent bd0d73cc33
commit 79c9b0bb75
Signed by: dadada
SSH key fingerprint: SHA256:bFAjFH3hR8zRBaJjzQDjc3o4jqoq5EZ87l+KXEjxIz0
2 changed files with 12 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

12
nixos/ninurta/configuration.nix
View file

@ -367,15 +367,21 @@ in
22 # SSH 22 # SSH
80 # munin web 80 # munin web
631 # Printing 631 # Printing
3000 # Hydra
softServePort
]; ];
allowedUDPPorts = [ allowedUDPPorts = [
631 # Printing 631 # Printing
51234 # Wireguard 51234 # Wireguard
51235 # Wireguard 51235 # Wireguard
]; ];
logReversePathDrops = true; interfaces = {
uwu.allowedTCPPorts = [
softServePort
];
wg0.allowedTCPPorts = [
3000 # Hydra
4949 # munin-node
];
};
}; };
services.resolved.enable = true; services.resolved.enable = true;

4
nixos/surgat/configuration.nix
View file

@ -123,12 +123,14 @@ in
22 # SSH 22 # SSH
80 80
443 # HTTPS 443 # HTTPS
4949 # munin-node
]; ];
allowedUDPPorts = [ allowedUDPPorts = [
51234 # Wireguard 51234 # Wireguard
51235 # Wireguard 51235 # Wireguard
]; ];
interfaces.ninurta.allowedTCPPorts = [
4949 # munin-node
];
}; };
# Use the GRUB 2 boot loader. # Use the GRUB 2 boot loader.