mirror of
https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git
synced 2026-01-09 08:58:24 +01:00
base/roowho2: traffic filter to PVV IP-space
This commit is contained in:
@@ -1,4 +1,12 @@
|
|||||||
{ ... }:
|
{ lib, values, ... }:
|
||||||
{
|
{
|
||||||
services.roowho2.enable = true;
|
services.roowho2.enable = lib.mkDefault true;
|
||||||
|
|
||||||
|
systemd.sockets.roowho2-rwhod.socketConfig = {
|
||||||
|
IPAddressDeny = "any";
|
||||||
|
IPAddressAllow = [
|
||||||
|
"127.0.0.1"
|
||||||
|
values.ipv4-space
|
||||||
|
];
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user