felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-07-06 02:31:48 +02:00
Code Issues Projects Releases Wiki Activity

lupine5/openvpn: additional config, open firewall

Browse Source
This commit is contained in:
h7x4
2026-07-06 02:37:06 +09:00
parent fcfcb07e59
commit 4b8be337e0
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/lupine/services/openvpn.nix
+11 -2
View File
@@ -28,8 +28,10 @@ in
services.openvpn.servers."ov-tunnel" = { services.openvpn.servers."ov-tunnel" = {
config = renderConfig { config = renderConfig {
mode = "server";
# TODO: use aliases # TODO: use aliases
local = values.services.knutsen-vpn; local = "0.0.0.0";
port = 1194; port = 1194;
proto = "udp"; proto = "udp";
@@ -63,7 +65,6 @@ in
]; ];
keepalive = "10 120"; keepalive = "10 120";
data-ciphers = "none";
user = "nobody"; user = "nobody";
group = "nobody"; group = "nobody";
@@ -84,9 +85,17 @@ in
persist-key = true; persist-key = true;
persist-tun = true; persist-tun = true;
tls-version-min = "1.2";
tls-version-max = "1.2";
verb = 5; verb = 5;
explicit-exit-notify = 1; explicit-exit-notify = 1;
}; };
}; };
networking.firewall = {
allowedTCPPorts = [ 1194 ];
allowedUDPPorts = [ 1194 ];
};
} }