lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

bvm-radius: RADIUS fw/pkg setup

Browse source
This commit is contained in:
Luke Granger-Brown 2021-09-25 12:32:27 +00:00
parent 0d6ab41728
commit 4530991827
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
ops/nixos/bvm-radius/default.nix
View file

@ -24,8 +24,25 @@ in {
}; };
defaultGateway = { address = "92.118.28.1"; interface = "enp2s0"; }; defaultGateway = { address = "92.118.28.1"; interface = "enp2s0"; };
defaultGateway6 = { address = "2a09:a441::1"; interface = "enp2s0"; }; defaultGateway6 = { address = "2a09:a441::1"; interface = "enp2s0"; };
firewall = {
extraCommands = ''
# Allow JANET inbound RADIUS traffic.
ip46tables -A nixos-fw -p udp --dport 1812 --src roaming0.ja.net -j nixos-fw-accept
ip46tables -A nixos-fw -p udp --dport 1812 --src roaming1.ja.net -j nixos-fw-accept
ip46tables -A nixos-fw -p udp --dport 1812 --src roaming2.ja.net -j nixos-fw-accept
# Allow inbound RADIUS from authenticators.
ip6tables -A nixos-fw -p udp --dport 1812 --src 2a09:a443::/64 -j nixos-fw-accept
iptables -A nixos-fw -p udp --dport 1812 --src 92.118.30.0/24 -j nixos-fw-accept
'';
};
}; };
my.ip.tailscale = "100.120.98.116"; my.ip.tailscale = "100.120.98.116";
environment.systemPackages = with pkgs; [
freeradius
];
system.stateVersion = "21.05"; system.stateVersion = "21.05";
} }