cilly/flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

containers/citrine: forward ssh

Browse source
This commit is contained in:
Cilly Leang 2026-03-16 03:40:35 +11:00
parent 15c4e4fc51
commit fa3872647d
Signed by: cilly
GPG key ID: 6500251E087653C9
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
containers/citrine/flake.nix
View file

@ -18,6 +18,16 @@
name = "citrine"; name = "citrine";
subnet = "3"; subnet = "3";
in { in {
# TODO: this is likely dandelion specific
networking.firewall.extraCommands = ''
ip6tables -t nat -A PREROUTING -d fd0d::1:1003 -p tcp --dport 22 -j DNAT --to-destination fd0d:1::${subnet}:2
ip6tables -t nat -A POSTROUTING -d fd0d:1::${subnet}:2 -p tcp --dport 22 -j SNAT --to-source fd0d::1:1003
'';
networking.firewall.extraStopCommands = ''
ip6tables -t nat -D PREROUTING -d fd0d::1:1003 -p tcp --dport 22 -j DNAT --to-destination fd0d:1::${subnet}:2 || true
ip6tables -t nat -D POSTROUTING -d fd0d:1::${subnet}:2 -p tcp --dport 22 -j SNAT --to-source fd0d::1:1003 || true
'';
services.nginx.virtualHosts."garden.lava.moe" = { services.nginx.virtualHosts."garden.lava.moe" = {
useACMEHost = "lava.moe"; useACMEHost = "lava.moe";
forceSSL = true; forceSSL = true;