rewrite firewall rules

2023-09-12 15:46:44 +03:00
parent 2b5b9bc57f
commit e61944dfde
7 changed files with 92 additions and 44 deletions
--- a/hosts/vno1-oh2/configuration.nix
+++ b/hosts/vno1-oh2/configuration.nix
@@ -143,12 +143,17 @@
    };

    services = {
-      friendlyport.vpn.ports = [
-        80
-        443
-        myData.ports.grafana
-        myData.ports.prometheus
-        myData.ports.soju
+      friendlyport.ports = [
+        {
+          subnets = [myData.tailscale_subnet.cidr];
+          tcp = [
+            80
+            443
+            myData.ports.grafana
+            myData.ports.prometheus
+            myData.ports.soju
+          ];
+        }
      ];

      node_exporter.enable = true;