voronind/nix
0
0
Fork 0
Code Issues 40 Pull requests Packages Projects Releases Wiki Activity

Home: Disable external ssh for git.

Browse source
This commit is contained in:
Dmitry Voronin 2024-11-21 07:18:01 +03:00
parent 4d23af8e34
commit a2ca53a4fc
Signed by: voronind
SSH key fingerprint: SHA256:3kBb4iV2ahufEBNq+vFbUe4QYfHt98DHQjN7QaptY9k
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
host/x86_64-linux/home/Network.nix
View file

@ -72,7 +72,7 @@ in {
# Allow VPN connections from Wan. # Allow VPN connections from Wan.
# + (mkForward external cfg.vpn.port cfg.vpn.address cfg.vpn.port udp) # + (mkForward external cfg.vpn.port cfg.vpn.address cfg.vpn.port udp)
# Nginx HTTP access from Wan. # Nginx HTTP.
+ (mkForward external cfg.proxy.port cfg.proxy.address cfg.proxy.port tcp) + (mkForward external cfg.proxy.port cfg.proxy.address cfg.proxy.port tcp)
+ (mkForward internal cfg.proxy.port cfg.proxy.address cfg.proxy.port tcp) + (mkForward internal cfg.proxy.port cfg.proxy.address cfg.proxy.port tcp)
@ -82,12 +82,15 @@ in {
+ (mkForward external 54630 cfg.download.address 54630 udp) + (mkForward external 54630 cfg.download.address 54630 udp)
+ (mkForward external 54631 cfg.download.address 54631 udp) + (mkForward external 54631 cfg.download.address 54631 udp)
# Git ssh connections. # Git SSH connections.
+ (mkForward external cfg.git.portSsh cfg.git.address cfg.git.portSsh tcp) # + (mkForward external cfg.git.portSsh cfg.git.address cfg.git.portSsh tcp)
+ (mkForward internal cfg.git.portSsh cfg.git.address cfg.git.portSsh tcp) + (mkForward internal cfg.git.portSsh cfg.git.address cfg.git.portSsh tcp)
# Print serivce. # Print serivce.
+ (mkForward internal cfg.print.port cfg.print.address cfg.print.port tcp); + (mkForward internal cfg.print.port cfg.print.address cfg.print.port tcp);
# External SSH access.
# + (mkForward external 22143 config.container.host 22143 tcp)
}; };
# Create Lan bridge. # Create Lan bridge.