nixos/git: Add NAT rules
This commit is contained in:
		@@ -4,7 +4,7 @@ let
 | 
				
			|||||||
  inherit (lib) mkMerge mkDefault;
 | 
					  inherit (lib) mkMerge mkDefault;
 | 
				
			||||||
  inherit (lib.my) net;
 | 
					  inherit (lib.my) net;
 | 
				
			||||||
  inherit (lib.my.c) pubDomain;
 | 
					  inherit (lib.my.c) pubDomain;
 | 
				
			||||||
  inherit (lib.my.c.colony) domain prefixes;
 | 
					  inherit (lib.my.c.colony) domain prefixes firewallForwards;
 | 
				
			||||||
  inherit (lib.my.c.nginx) baseHttpConfig proxyHeaders;
 | 
					  inherit (lib.my.c.nginx) baseHttpConfig proxyHeaders;
 | 
				
			||||||
in
 | 
					in
 | 
				
			||||||
{
 | 
					{
 | 
				
			||||||
@@ -197,6 +197,7 @@ in
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
              firewall = {
 | 
					              firewall = {
 | 
				
			||||||
                tcp.allowed = [ 19999 "http" "https" ];
 | 
					                tcp.allowed = [ 19999 "http" "https" ];
 | 
				
			||||||
 | 
					                nat.forwardPorts."${allAssignments.estuary.internal.ipv4.address}" = firewallForwards allAssignments;
 | 
				
			||||||
                extraRules = ''
 | 
					                extraRules = ''
 | 
				
			||||||
                  table inet filter {
 | 
					                  table inet filter {
 | 
				
			||||||
                    chain forward {
 | 
					                    chain forward {
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user