base/roowho2: traffic filter to PVV IP-space

This commit is contained in:
h7x4
2026-01-06 11:31:41 +09:00
parent 25c8171e3d
commit 4abe86dc07

View File

@@ -1,4 +1,12 @@
{ ... }:
{ lib, values, ... }:
{
services.roowho2.enable = true;
services.roowho2.enable = lib.mkDefault true;
systemd.sockets.roowho2-rwhod.socketConfig = {
IPAddressDeny = "any";
IPAddressAllow = [
"127.0.0.1"
values.ipv4-space
];
};
}