Update hosts/server/configuration.nix
Check NixOS configurations / eval-hosts (push) Failing after 28m5s
Check NixOS configurations / eval-hosts (push) Failing after 28m5s
This commit is contained in:
@@ -101,25 +101,25 @@ services.nfs.server = {
|
|||||||
# };
|
# };
|
||||||
|
|
||||||
# Allow WireGuard UDP port in firewall
|
# Allow WireGuard UDP port in firewall
|
||||||
networking.firewall.allowedUDPPorts = [ 51820 ];
|
# networking.firewall.allowedUDPPorts = [ 51820 ];
|
||||||
|
|
||||||
# Enable IPv4 forwarding
|
# Enable IPv4 forwarding
|
||||||
boot.kernel.sysctl = {
|
# boot.kernel.sysctl = {
|
||||||
"net.ipv4.ip_forward" = 1;
|
# "net.ipv4.ip_forward" = 1;
|
||||||
};
|
# };
|
||||||
|
|
||||||
# NAT: lets LAN devices reply to the Pi without needing routes on the LAN router
|
# NAT: lets LAN devices reply to the Pi without needing routes on the LAN router
|
||||||
networking.nat = {
|
# networking.nat = {
|
||||||
enable = true;
|
# enable = true;
|
||||||
externalInterface = "enp0s18";
|
# externalInterface = "enp0s18";
|
||||||
internalInterfaces = [ "wg0" ];
|
# internalInterfaces = [ "wg0" ];
|
||||||
};
|
# };
|
||||||
services.prometheus.exporters.node = {
|
services.prometheus.exporters.node = {
|
||||||
enable = true;
|
enable = true;
|
||||||
openFirewall = true;
|
openFirewall = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
services.openssh.settings.PermitRootLogin = "yes";
|
# services.openssh.settings.PermitRootLogin = "yes";
|
||||||
# Open ports in the firewall.
|
# Open ports in the firewall.
|
||||||
networking.firewall.allowedTCPPorts = [ 2049 111 ];
|
networking.firewall.allowedTCPPorts = [ 2049 111 ];
|
||||||
# networking.firewall.allowedUDPPorts = [ 111 2049 20048 ];
|
# networking.firewall.allowedUDPPorts = [ 111 2049 20048 ];
|
||||||
|
|||||||
Reference in New Issue
Block a user