mirror of
https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git
synced 2026-01-08 08:28:25 +01:00
base/roowho2: traffic filter to PVV IP-space
This commit is contained in:
@@ -1,4 +1,12 @@
|
||||
{ ... }:
|
||||
{ lib, values, ... }:
|
||||
{
|
||||
services.roowho2.enable = true;
|
||||
services.roowho2.enable = lib.mkDefault true;
|
||||
|
||||
systemd.sockets.roowho2-rwhod.socketConfig = {
|
||||
IPAddressDeny = "any";
|
||||
IPAddressAllow = [
|
||||
"127.0.0.1"
|
||||
values.ipv4-space
|
||||
];
|
||||
};
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user