aboutsummaryrefslogtreecommitdiffstats
path: root/hosts
diff options
context:
space:
mode:
authorMark Nipper <nipsy@bitgnome.net>2024-06-13 00:27:42 -0700
committerMark Nipper <nipsy@bitgnome.net>2024-06-13 00:27:42 -0700
commit5e8cc86818d4ac793a943273385dbaa0c7424b22 (patch)
tree2cca2443959e7baded0ed53afe2eafba82189052 /hosts
parentd9720c573aadaad8b54d32f9a6f1c7dc0ba17ac8 (diff)
downloadnix-5e8cc86818d4ac793a943273385dbaa0c7424b22.tar
nix-5e8cc86818d4ac793a943273385dbaa0c7424b22.tar.gz
nix-5e8cc86818d4ac793a943273385dbaa0c7424b22.tar.bz2
nix-5e8cc86818d4ac793a943273385dbaa0c7424b22.tar.lz
nix-5e8cc86818d4ac793a943273385dbaa0c7424b22.tar.xz
nix-5e8cc86818d4ac793a943273385dbaa0c7424b22.tar.zst
nix-5e8cc86818d4ac793a943273385dbaa0c7424b22.zip
Enable previously added rules
Diffstat (limited to 'hosts')
-rw-r--r--hosts/darkstar/default.nix8
1 files changed, 8 insertions, 0 deletions
diff --git a/hosts/darkstar/default.nix b/hosts/darkstar/default.nix
index 5208bfd..ae697ca 100644
--- a/hosts/darkstar/default.nix
+++ b/hosts/darkstar/default.nix
@@ -83,7 +83,9 @@
secrets = {
"kea-dhcp4_conf" = {};
+ "nftables/forward" = {};
"nftables/ssh" = {};
+ "nftables/voip" = {};
};
};
@@ -92,20 +94,26 @@
systemd.services."nftables-extra" = {
description = "nftables extra firewall rules";
script = ''
+ ${pkgs.nftables}/bin/nft -f ${config.sops.secrets."nftables/forward".path}
${pkgs.nftables}/bin/nft -f ${config.sops.secrets."nftables/ssh".path}
+ ${pkgs.nftables}/bin/nft -f ${config.sops.secrets."nftables/voip".path}
'';
serviceConfig = {
RemainAfterExit = true;
Type = "oneshot";
};
unitConfig = {
+ ConditionPathExists = config.sops.secrets."nftables/forward".path;
ConditionPathExists = config.sops.secrets."nftables/ssh".path;
+ ConditionPathExists = config.sops.secrets."nftables/voip".path;
};
wantedBy = [ "multi-user.target" ];
};
systemd.paths."nftables-extra" = {
pathConfig = {
+ PathExists = config.sops.secrets."nftables/forward".path;
PathExists = config.sops.secrets."nftables/ssh".path;
+ PathExists = config.sops.secrets."nftables/voip".path;
};
wantedBy = [ "multi-user.target" ];
};