blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

117 current 2025-10-08 19:07:36 25.05.20251006.20c4598 6.12.50 *

Browse Source
This commit is contained in:
blake
2025-10-08 19:43:45 -05:00
parent 11e1ad3afb
commit 6872ed49ff
1 changed files with 1 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
modules/system/vpn-confinement.nix
View File

@@ -44,24 +44,5 @@ in
sops.secrets = { sops.secrets = {
"vpncon_mex_config" = { owner = "root"; group = "root"; } "vpncon_mex_config" = { owner = "root"; group = "root"; }
}; };
}
vpnNamespaces.<name> = { # The name is limited to 7 characters
enable = true;
wireguardConfigFile = config.sops.secrets."vpncon_mex_config".path;
accessibleFrom = [
"<ip or subnet>"
];
portMappings = [{
from = <port on host>;
to = <port in VPN network namespace>;
protocol = "<transport protocol>"; # protocol = "tcp"(default), "udp", or "both"
}];
openVPNPorts = [{
port = <port to access through VPN interface>;
protocol = "<transport protocol>"; # protocol = "tcp"(default), "udp", or "both"
}];
}; };
} }