]> Git — Sourcephile - sourcephile-nix.git/blob - hosts/mermet/croc.nix
nix: update to latest julm-nix
[sourcephile-nix.git] / hosts / mermet / croc.nix
1 { lib, config, ... }:
2 let
3 inherit (config.services) croc;
4 in
5 {
6 networking.nftables.ruleset = ''
7 table inet filter {
8 chain input-net {
9 tcp dport {${lib.concatMapStringsSep "," toString croc.ports}} counter accept comment "croc"
10 }
11 }
12 '';
13 services.croc = {
14 enable = true;
15 pass = builtins.readFile croc/pass.clear;
16 #debug = true;
17 };
18 }