caspervk/nixos
1
0
Fork 0
Code Actions Activity

Compare commits

base: caspervk:4a2a36e57d47141b4c43b44460021126f71a5ca5
Branches Tags
caspervk:master
caspervk:dev
...
compare: caspervk:c2dc5cb7aa97c95e263f9be149be62cea61b6b44
Branches Tags
caspervk:master
caspervk:dev

2 commits
4a2a36e57d ... c2dc5cb7aa

Author SHA1 Message Date
Casper V. Kristensen c2dc5cb7aa flake.lock: Update 
Flake lock file updates:

• Updated input 'agenix':
    'github:ryantm/agenix/07479c2e7396acaaaac5925483498154034ea80a' (2024-05-07)
  → 'github:ryantm/agenix/8d37c5bdeade12b6479c85acd133063ab53187a0' (2024-05-09)
• Updated input 'home-manager-unstable':
    'github:nix-community/home-manager/6e277d9566de9976f47228dd8c580b97488734d4' (2024-05-07)
  → 'github:nix-community/home-manager/223743313bab8b0b44a57eaf9573de9f69082b4d' (2024-05-10)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/8be0d8a1ed4f96d99b09aa616e2afd47acc3da89' (2024-05-07)
  → 'github:NixOS/nixpkgs/9a9960b98418f8c385f52de3b09a63f9c561427a' (2024-05-09)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/b211b392b8486ee79df6cdfb1157ad2133427a29' (2024-05-07)
  → 'github:NixOS/nixpkgs/f1010e0469db743d14519a1efd37e23f8513d714' (2024-05-09)
 2024-05-10 16:36:15 +02:00
Casper V. Kristensen a18d647cb3 sigma: allow ad hoc ports in firewall 2024-05-10 16:36:10 +02:00
2 changed files with 30 additions and 22 deletions
Show stats Expand all files Collapse all files

24
flake.lock
View file

@ -12,11 +12,11 @@
"systems": "systems" "systems": "systems"
}, },
"locked": { "locked": {
"lastModified": 1715101957, "lastModified": 1715290355,
"narHash": "sha256-fs5uVQFTfgb4L9pnhldeyTHNcYwn1U4nKYoCBJ6W3W4=", "narHash": "sha256-2T7CHTqBXJJ3ZC6R/4TXTcKoXWHcvubKNj9SfomURnw=",
"owner": "ryantm", "owner": "ryantm",
"repo": "agenix", "repo": "agenix",
"rev": "07479c2e7396acaaaac5925483498154034ea80a", "rev": "8d37c5bdeade12b6479c85acd133063ab53187a0",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -85,11 +85,11 @@
] ]
}, },
"locked": { "locked": {
"lastModified": 1715077503, "lastModified": 1715348159,
"narHash": "sha256-AfHQshzLQfUqk/efMtdebHaQHqVntCMjhymQzVFLes0=", "narHash": "sha256-nP0PJZ3dR0ols1V+w+sYBki7JlSRFvFJ8J8B00Oa7BM=",
"owner": "nix-community", "owner": "nix-community",
"repo": "home-manager", "repo": "home-manager",
"rev": "6e277d9566de9976f47228dd8c580b97488734d4", "rev": "223743313bab8b0b44a57eaf9573de9f69082b4d",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -152,11 +152,11 @@
}, },
"nixpkgs": { "nixpkgs": {
"locked": { "locked": {
"lastModified": 1715106579, "lastModified": 1715218190,
"narHash": "sha256-gZMgKEGiK6YrwGBiccZ1gemiUwjsZ1Zv49KYOgmX2fY=", "narHash": "sha256-R98WOBHkk8wIi103JUVQF3ei3oui4HvoZcz9tYOAwlk=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "8be0d8a1ed4f96d99b09aa616e2afd47acc3da89", "rev": "9a9960b98418f8c385f52de3b09a63f9c561427a",
"type": "github" "type": "github"
}, },
"original": { "original": {
@ -198,11 +198,11 @@
}, },
"nixpkgs-unstable": { "nixpkgs-unstable": {
"locked": { "locked": {
"lastModified": 1715087517, "lastModified": 1715266358,
"narHash": "sha256-CLU5Tsg24Ke4+7sH8azHWXKd0CFd4mhLWfhYgUiDBpQ=", "narHash": "sha256-doPgfj+7FFe9rfzWo1siAV2mVCasW+Bh8I1cToAXEE4=",
"owner": "NixOS", "owner": "NixOS",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "b211b392b8486ee79df6cdfb1157ad2133427a29", "rev": "f1010e0469db743d14519a1efd37e23f8513d714",
"type": "github" "type": "github"
}, },
"original": { "original": {

28
hosts/sigma/network.nix
View file

@ -136,27 +136,35 @@
allowedUDPPortRanges = lib.mkForce []; allowedUDPPortRanges = lib.mkForce [];
interfaces = { interfaces = {
"enp5s0" = { "enp5s0" = {
allowedTCPPorts = [
1234 # ad hoc
1337 # ad hoc
139 # Samba
22 # SSH
25 # Mail SMTP
443 # Caddy
445 # Samba
465 # Mail ESMTP
8000 # ad hoc
8080 # ad hoc
80 # Caddy
993 # Mail IMAPS
];
allowedUDPPorts = [ allowedUDPPorts = [
139 # Samba 139 # Samba
445 # Samba 445 # Samba
]; ];
allowedTCPPorts = [
139 # Samba
22 # SSH
25 # Mail SMTP
443 # Caddy
445 # Samba
465 # Mail ESMTP
80 # Caddy
993 # Mail IMAPS
];
}; };
"wg-sigma-public" = { "wg-sigma-public" = {
allowedTCPPorts = [ allowedTCPPorts = [
1234 # ad hoc
1337 # ad hoc
22 # SSH 22 # SSH
25 # Mail SMTP 25 # Mail SMTP
443 # Caddy 443 # Caddy
465 # Mail ESMTP 465 # Mail ESMTP
8000 # ad hoc
8080 # ad hoc
80 # Caddy 80 # Caddy
993 # Mail IMAPS 993 # Mail IMAPS
]; ];