lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

totoro: add firewall rule for Lifx

Browse source
This commit is contained in:
Luke Granger-Brown 2022-04-06 01:00:55 +01:00
parent da71f20036
commit fa8f317d6f
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
ops/nixos/totoro/default.nix
View file

@ -109,6 +109,10 @@ in {
3702 # samba-wsdd 3702 # samba-wsdd
]; ];
firewall.checkReversePath = false; # breaks Lifx firewall.checkReversePath = false; # breaks Lifx
firewall.extraCommands = ''
# Allow all inbound UDP from localnet for Lifx purposes...
iptables -A nixos-fw -p udp --src 192.168.1.0/24 --dst 192.168.1.40 -j nixos-fw-accept
'';
macvlans.mv-plex = { interface = "br-ext"; }; macvlans.mv-plex = { interface = "br-ext"; };
interfaces.mv-plex = { interfaces.mv-plex = {