forked from DGNum/lab-infra
Constantin Gierczak--Galle
862168b2bc
Reviewed-on: DGNum/lab-infra#9 Co-authored-by: Constantin Gierczak--Galle <git.cst1@mailbox.org> Co-committed-by: Constantin Gierczak--Galle <git.cst1@mailbox.org>
26 lines
519 B
Nix
26 lines
519 B
Nix
{ lib, ... }:
|
|
|
|
lib.extra.mkConfig {
|
|
enabledModules = [
|
|
# List of modules to enable
|
|
];
|
|
|
|
enabledServices = [
|
|
# List of services to enable
|
|
"nsd"
|
|
];
|
|
|
|
extraConfig = {
|
|
# TODO : retrieve this address from meta/network.nix
|
|
deployment.targetHost = "45.13.104.26";
|
|
networking.firewall = {
|
|
enable = true;
|
|
logRefusedConnections = lib.mkForce true;
|
|
logRefusedPackets = lib.mkForce true;
|
|
allowedTCPPorts = [ 53 ];
|
|
allowedUDPPorts = [ 53 ];
|
|
};
|
|
};
|
|
|
|
root = ./.;
|
|
}
|