gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 20:39:18 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

hosts/samhain: NFS move + correct interface

Browse source
This commit is contained in:
kat witch 2021-04-26 19:37:27 +01:00
parent 41b786d436
commit 6777ba6cb5
No known key found for this signature in database
GPG key ID: 1B477797DCA5EC72
1 changed files with 10 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

29
hosts/samhain/nixos/default.nix
View file

@ -44,18 +44,6 @@ in {
group = "nginx";
};
fileSystems."/mnt/hex-corn" = {
device = "storah.net.lilwit.ch:/data/cornbox";
fsType = "nfs";
options = [ "x-systemd.automount" "noauto" ];
};
fileSystems."/mnt/hex-tor" = {
device = "storah.net.lilwit.ch:/data/torrents";
fsType = "nfs";
options = [ "x-systemd.automount" "noauto" ];
};
secrets.files.kat-glauca-dns = {
text = ''
user="${tf.variables.dyn_username.ref}"
@ -98,33 +86,36 @@ in {
# other stuffs
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
boot.supportedFilesystems = [ "zfs" "xfs" "nfs" ];
boot.supportedFilesystems = [ "zfs" "xfs" ];
networking.hostName = "samhain";
networking.hostId = "617050fc";
networking.useDHCP = false;
networking.interfaces.enp34s0.useDHCP = true;
networking.firewall.allowPing = true;
networking.firewall.interfaces.enp1s0.allowedTCPPorts = [
networking.firewall.interfaces.enp34s0.allowedTCPPorts = [
1935 # rtmp
80 # http
443 # https
445 # samba
139 # samba
];
networking.firewall.interfaces.hexnet.allowedTCPPorts = [
80 # http
443 # https
32101 # mpv
443 # https
111 # nfs
2049 # nfs
];
networking.firewall.interfaces.enp1s0.allowedUDPPorts = [
137 # samba
138 # samba
networking.firewall.interfaces.enp34s0.allowedUDPPorts = [
4010 # scream
111 # nfs
2049 # nfs
];
networking.firewall.interfaces.hexnet.allowedUDPPorts = [ ];
networking.firewall.allowedUDPPortRanges = [{
from = 32768;
to = 60999;