numbus/numbus-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update services. Update configuration.

Browse Source
This commit is contained in:
Raphaël Numbus
2026-01-11 17:45:11 +01:00
parent 755cf09fdc
commit 14c5190dc8
13 changed files with 111 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
templates/nix-config/misc/activation.nix
+1
View File
@@ -20,6 +20,7 @@
mkdir -p /mnt/config/ /mnt/data/ /home/numbus-admin/.numbus-server/
chown -R numbus-admin:users /mnt/config/
chown -R numbus-admin:users /mnt/data/
chown -R 100032:users /mnt/data/nextcloud/
chown -R numbus-admin:users /home/numbus-admin/.numbus-server/
touch /home/numbus-admin/.numbus-server/chowned.true
templates/nix-config/misc/networking.nix
+7 -17
View File
@@ -6,14 +6,18 @@
networking.wireless.enable = false;
networking.networkmanager.enable = false;
services.resolved.enable = false;
networking.nftables.enable = true;
networking.firewall.enable = true;
# Allow rootless containers to bind to port 53 and up
boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;
# Bridge configuration for VMs
networking.bridges.br0.interfaces = [ "TARGET_INTERFACE" ];
networking.interfaces.br0.useDHCP = false;
networking.nameservers = [ "HOME_SERVER_IP" "9.9.9.9" ];
networking.nameservers = [ "127.0.0.1" "9.9.9.9" ];
networking.interfaces.br0.ipv4.addresses = [{
address = "HOME_SERVER_IP";
prefixLength = 24;
@@ -23,22 +27,8 @@
interface = "br0";
};
networking.nftables.tables.nat = {
family = "ip";
content = ''
chain prerouting {
type nat hook prerouting priority dstnat; policy accept;
iifname "br0" tcp dport 80 redirect to :8080
iifname "br0" tcp dport 443 redirect to :8443
iifname "br0" tcp dport 53 redirect to :5353
iifname "br0" udp dport 53 redirect to :5353
iifname "br0" udp dport 67 redirect to :6767
}
'';
};
# Open ports in the firewall
networking.firewall.allowPing = true;
networking.firewall.allowedTCPPorts = [ 5353 8080 8443 ];
networking.firewall.allowedUDPPorts = [ 5353 6767 ];
networking.firewall.allowedTCPPorts = [ 53 80 443 ];
networking.firewall.allowedUDPPorts = [ 53 443 ];
}