zuckerberg/nix-config
zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

iodine DNS tunnel

Browse Source
This commit is contained in:
zuckerberg 2021-09-06 12:43:07 -04:00
parent 2b13b6b9f6
commit 60ddbc18e5
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
machines/liza/configuration.nix
View File

@ -217,12 +217,16 @@ in {
services.iodine.server = { services.iodine.server = {
enable = true; enable = true;
ip = "94.23.33.23"; ip = "192.168.99.1";
domain = "tun.neet.dev"; domain = "tun.neet.dev";
passwordFile = "/run/secrets/iodine"; passwordFile = "/run/secrets/iodine";
}; };
age.secrets.iodine.file = ../../secrets/iodine.age; age.secrets.iodine.file = ../../secrets/iodine.age;
networking.firewall.allowedUDPPorts = [ 53 ];
boot.kernel.sysctl."net.ipv4.ip_forward" = 1; boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
networking.nat.enable = true;
networking.nat.internalInterfaces = [ "dns0" ];
networking.nat.externalInterface = "enp1s0";
security.acme.acceptTerms = true; security.acme.acceptTerms = true;
security.acme.email = "zuckerberg@neet.dev"; security.acme.email = "zuckerberg@neet.dev";