diff --git a/hosts/x86_64-linux/beleth/default.nix b/hosts/x86_64-linux/beleth/default.nix index 587e94c..a07431f 100644 --- a/hosts/x86_64-linux/beleth/default.nix +++ b/hosts/x86_64-linux/beleth/default.nix @@ -131,7 +131,7 @@ with lib; { Host frotting HostName 2a0f:be01:0:100::a3 User communism - ''; + ''; services.mullvad-vpn.enable = true; diff --git a/hosts/x86_64-linux/beleth/nfs.nix b/hosts/x86_64-linux/beleth/nfs.nix index 622db5a..d24ab41 100644 --- a/hosts/x86_64-linux/beleth/nfs.nix +++ b/hosts/x86_64-linux/beleth/nfs.nix @@ -4,36 +4,35 @@ inputs, ... }: { -# "2a0f:be01:0:100::/64" -# "2a0f:be01:0:200::/64" -# "2a0f:be01:fe:f00::/56" + # "2a0f:be01:0:100::/64" + # "2a0f:be01:0:200::/64" + # "2a0f:be01:fe:f00::/56" services.nfs = { server = { enable = true; exports = '' - /export 2a0f:be01:0:100::/64(ro,insecure,crossmnt,async,fsid=0,no_subtree_check) 2a0f:be01:0:200::/64(ro,insecure,crossmnt,async,fsid=0,no_subtree_check) 2a0f:be01:fe:f00::/56(ro,insecure,crossmnt,async,fsid=0,no_subtree_check) + /export 2a0f:be01:0:100::/64(ro,insecure,crossmnt,async,fsid=0,no_subtree_check) 2a0f:be01:0:200::/64(ro,insecure,crossmnt,async,fsid=0,no_subtree_check) 2a0f:be01:fe:f00::/56(ro,insecure,crossmnt,async,fsid=0,no_subtree_check) ''; }; }; - networking.firewall.allowedTCPPorts = [ 2049 ]; + allowedTCPPorts = [111 2049 /* 4000 4001 4002 20048 */]; networking.firewall.extraInputRules = '' - iifname wg0 ip6 saddr { 2a0f:be01:0:100::/64, 2a0f:be01:0:200::/64, 2a0f:be01:fe:f00::/56 } tcp dport 2049 accept + iifname wg0 ip6 saddr { 2a0f:be01:0:100::/64, 2a0f:be01:0:200::/64, 2a0f:be01:fe:f00::/56 } tcp dport { 111, 2049 } accept ''; - fileSystems = { "/export/shows" = { device = "/home/xqtc/jellyfin/shows"; - options = [ "bind" ]; + options = ["bind"]; }; "/export/movies" = { device = "/home/xqtc/jellyfin/movies"; - options = [ "bind" ]; + options = ["bind"]; }; "/export/music" = { device = "/home/xqtc/jellyfin/music"; - options = [ "bind" ]; + options = ["bind"]; }; }; }