nix/modules/knot: make ssh ports configurable #716

-8

1 changed file

Diff round #2

expand all

unified split

nix

modules

knot.nix

-8

nix/modules/knot.nix

··· 32 32 description = "User that hosts git repos and performs git operations"; 33 33 }; 34 34 35 - openFirewall = mkOption { 36 - type = types.bool; 37 - default = true; 38 - description = "Open port 22 in the firewall for ssh"; 39 - }; 40 - 41 35 stateDir = mkOption { 42 36 type = types.path; 43 37 default = "/home/${cfg.gitUser}"; ··· 205 199 Restart = "always"; 206 200 }; 207 201 }; 208 - 209 - networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [22]; 210 202 }; 211 203 }

History

3 rounds 4 comments

boltless.me submitted #2 4mo

interdiff

1 commit

expand

51e91003

nix/modules/knot: remove firewall settings

3/3 success

expand

expand 4 comments

oppi.li 4mo

if openFirewall is not set to true, this is already configurable is it not?

boltless.me 4mo

Well.. it is, but as ssh ports are also configurable and the firewall should follow the correct configured ssh ports, I think removing the firewall settings will make things simpler. Users can configure there networks by their own.

oppi.li 4mo

this is pretty common practice in nixpkgs.

https://github.com/NixOS/nixpkgs/blob/a84b0a7c509bdbaafbe6fe6e947bdaa98acafb99/nixos/modules/services/monitoring/vmagent.nix#L138

boltless.me 4mo

ok I'm closing this. the description explicitly states it opens hard-coded port 22, so I think it's fine to leave it not following config.services.openssh.posts.

closed without merging