diff --git a/extras/secrets-template.nix b/extras/secrets-template.nix index bd7d892..e102331 100644 --- a/extras/secrets-template.nix +++ b/extras/secrets-template.nix @@ -69,5 +69,4 @@ jimIP2 = ""; lunaIP = ""; cornIP = ""; - vertIP = ""; } diff --git a/extras/secrets.nix b/extras/secrets.nix index 30312f9..0d7d38b 100644 Binary files a/extras/secrets.nix and b/extras/secrets.nix differ diff --git a/system/server/firewall.nix b/system/server/firewall.nix index cab7798..a5a4184 100644 --- a/system/server/firewall.nix +++ b/system/server/firewall.nix @@ -12,7 +12,7 @@ # Add extra input rules using nftables extraInputRules = '' ip saddr { ${outputs.ips.localSpan}.0/24, ${outputs.ips.wgSpan}.0/24 } tcp dport 2049 accept comment "Accept NFS" - ip saddr { ${outputs.ips.pc}, ${outputs.secrets.lunaIP}, ${outputs.secrets.cornIP}, ${outputs.secrets.vertIP} } tcp dport { 1935, 1945 } accept comment "Accept RTMP" + ip saddr { ${outputs.ips.pc}, ${outputs.secrets.lunaIP}, ${outputs.secrets.cornIP} } tcp dport { 1935, 1945 } accept comment "Accept RTMP" ip saddr ${outputs.ips.wgSpan}.3 tcp dport ${mailPorts} accept comment "Accept mail" ''; };