diff options
Diffstat (limited to '')
| -rw-r--r-- | hosts/arrakis/default.nix | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix index c667419..890474c 100644 --- a/hosts/arrakis/default.nix +++ b/hosts/arrakis/default.nix @@ -283,6 +283,26 @@ wantedBy = [ "multi-user.target" ]; }; + "nfs-bind-mount" = { + after = [ "zfs-import-data.service" ]; + description = "Bind NFS exports to ZFS paths"; + serviceConfig = { + Type = "simple"; + ExecStart = '' + ${pkgs.util-linux}/bin/mount /srv/nfs/keepers + ${pkgs.util-linux}/bin/mount /srv/nfs/movies + ${pkgs.util-linux}/bin/mount /srv/nfs/tv + ''; + ExecStop = '' + ${pkgs.util-linux}/bin/umount /srv/nfs/keepers + ${pkgs.util-linux}/bin/umount /srv/nfs/movies + ${pkgs.util-linux}/bin/umount /srv/nfs/tv + ''; + RemainAfterExit = true; + }; + wantedBy = [ "local-fs.target" ]; + }; + "nftables-extra" = let rules_script = '' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "wlp5s0" tcp dport { http, https } counter accept # 80, 443' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "wlp5s0" udp dport { netbios-ns, netbios-dgm } counter accept # 137, 138' |