This commit is contained in:
Hadi 2024-08-23 10:56:42 +02:00
parent f27b66f878
commit ddeaf0170d
4 changed files with 3 additions and 30 deletions

View File

@ -30,10 +30,6 @@
inputs.hyprland.follows = "hyprland";
};
nixos-hardware.url = "github:NixOS/nixos-hardware/master";
vpnconfinement = {
url = "github:Maroka-chan/VPN-Confinement";
follows = "nixpkgs";
};
};
outputs = inputs@{ nixpkgs, ... }: {
@ -55,7 +51,6 @@
{ _module.args = { inherit inputs; }; }
inputs.sops-nix.nixosModules.sops
inputs.home-manager.nixosModules.home-manager
inputs.vpnconfinement.nixosModules.default
./hosts/server/configuration.nix
];
};

View File

@ -71,30 +71,9 @@ in {
user = "nixarr";
group = "nixarr";
openFirewall = true;
settings = {
"rpc-bind-address" = "192.168.15.1"; # Bind RPC/WebUI to bridge address
};
};
};
# Define VPN network namespace
vpnnamespaces.wg = {
enable = true;
wireguardConfigFile = "/data/.secret/wg.conf";
accessibleFrom = [ "192.168.1.0/24" ];
portMappings = [{
from = 9091;
to = 9091;
}];
openVPNPorts = [{
port = 60729;
protocol = "both";
}];
};
# Add systemd service to VPN network namespace.
systemd.services.transmission.vpnconfinement = {
enable = true;
vpnnamespace = "wg";
};
# Transmission port
networking.firewall.allowedTCPPorts = [ 9091 ];
}

View File

@ -18,5 +18,4 @@
# '';
# };
networking.firewall.allowedTCPPorts = [ 9091 ];
}

View File

@ -27,7 +27,7 @@
};
transmission-script = {
mode = "0755";
path = "/home/jackflix/transmission-script.sh";
path = "/data/transmission-script.sh";
};
pia-wg = {
mode = "0755";