lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

blade-{paris,tuvok}: allow IPv6 VRRP as well...

Browse source
This commit is contained in:
Luke Granger-Brown 2021-03-29 22:53:19 +01:00
parent c8b482c67a
commit 878a457c83
2 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
ops/nixos/blade-paris/default.nix
View file

@ -64,7 +64,10 @@ in {
}];
defaultGateway = internetAddresses.v4.remote;
defaultGateway6 = internetAddresses.v6.remote;
firewall.extraCommands = "iptables -A INPUT -p vrrp -i br-mgmt -j ACCEPT";
firewall.extraCommands = ''
iptables -A INPUT -p vrrp -i br-mgmt -j ACCEPT
ip6tables -A INPUT -p vrrp -i br-mgmt -j ACCEPT
'';
};
my.ip.tailscale = "100.117.185.118";
my.blade.bay = 2;

5
ops/nixos/blade-tuvok/default.nix
View file

@ -66,7 +66,10 @@ in {
defaultGateway = internetAddresses.v4.remote;
defaultGateway6 = internetAddresses.v6.remote;
firewall.allowedTCPPorts = [ 80 443 ];
firewall.extraCommands = "iptables -A INPUT -p vrrp -i br-mgmt -j ACCEPT";
firewall.extraCommands = ''
iptables -A INPUT -p vrrp -i br-mgmt -j ACCEPT
ip6tables -A INPUT -p vrrp -i br-mgmt -j ACCEPT
'';
};
my.ip.tailscale = "100.119.123.33";
my.blade.bay = 6;