Update hosts/server/configuration.nix
Check NixOS configurations / eval-hosts (push) Failing after 28m5s
Check NixOS configurations / eval-hosts (push) Failing after 28m5s
This commit is contained in:
@@ -101,25 +101,25 @@ services.nfs.server = {
|
||||
# };
|
||||
|
||||
# Allow WireGuard UDP port in firewall
|
||||
networking.firewall.allowedUDPPorts = [ 51820 ];
|
||||
# networking.firewall.allowedUDPPorts = [ 51820 ];
|
||||
|
||||
# Enable IPv4 forwarding
|
||||
boot.kernel.sysctl = {
|
||||
"net.ipv4.ip_forward" = 1;
|
||||
};
|
||||
# boot.kernel.sysctl = {
|
||||
# "net.ipv4.ip_forward" = 1;
|
||||
# };
|
||||
|
||||
# NAT: lets LAN devices reply to the Pi without needing routes on the LAN router
|
||||
networking.nat = {
|
||||
enable = true;
|
||||
externalInterface = "enp0s18";
|
||||
internalInterfaces = [ "wg0" ];
|
||||
};
|
||||
# networking.nat = {
|
||||
# enable = true;
|
||||
# externalInterface = "enp0s18";
|
||||
# internalInterfaces = [ "wg0" ];
|
||||
# };
|
||||
services.prometheus.exporters.node = {
|
||||
enable = true;
|
||||
openFirewall = true;
|
||||
};
|
||||
|
||||
services.openssh.settings.PermitRootLogin = "yes";
|
||||
# services.openssh.settings.PermitRootLogin = "yes";
|
||||
# Open ports in the firewall.
|
||||
networking.firewall.allowedTCPPorts = [ 2049 111 ];
|
||||
# networking.firewall.allowedUDPPorts = [ 111 2049 20048 ];
|
||||
|
||||
Reference in New Issue
Block a user