Ittihadyya/adyya-flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

disabled services.murmur.enableFirewall

Browse source
This commit is contained in:
Ittihadyya 2024-11-25 15:42:23 +02:00
parent fc5f90104a
commit 59e179de94
2 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
networking/firewall.mod.nix
View file

@ -18,6 +18,19 @@
}
];
glucose.modules = [
{
networking.firewall = {
allowedTCPPorts = [
64738 # murmur tcp
];
allowedUDPPorts = [
64738 # murmur udp
];
};
}
];
aspartame.modules = [
({
services.fail2ban.enable = true;

2
services/murmur/murmur.mod.nix
View file

@ -18,7 +18,7 @@
password = "$MURMUR_LOGIN_PASSWORD";
port = 64738; # tcp/udp - this is the default but i'm writing it out as to not have to dig into the declaration every time i need to know which port it is.
openFirewall = true; # this is fine since glucose is not public-facing. otherwise i would prefer to do it through `networking`
openFirewall = false;
registerName = "Adyya's cave of hushed tones";
registerUrl = "https://mumble.collective-conciousness.monster";
registerHostname = "mumble.collective-conciousness.mosnter"; # i vaguely know what the difference between these two are but it is a bit strange, i guess.