machines/mermet/croc.nix

   1 { inputs, pkgs, lib, config, machineName, ... }:
   2 let
   3   croc = config.services.croc;
   4 in
   5 {
   6 networking.nftables.ruleset = ''
   7   add rule inet filter net2fw tcp dport {${lib.concatMapStringsSep "," toString croc.ports}} counter accept comment "croc"
   8 '';
   9 services.croc = {
  10   enable = true;
  11   pass = builtins.readFile (inputs.secrets + "/croc/pass");
  12 };
  13 }