diff --git a/hosts/nixos/vaniville/configuration.nix b/hosts/nixos/vaniville/configuration.nix index 8987b8e..ee29fc7 100644 --- a/hosts/nixos/vaniville/configuration.nix +++ b/hosts/nixos/vaniville/configuration.nix @@ -133,19 +133,21 @@ in { iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 80 -d ${snowbelle_ip}/32 -j SNAT --to-source ${vpsip4} # http iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 443 -d ${snowbelle_ip}/32 -j SNAT --to-source ${vpsip4} # https */ + + # iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 7567 -j DNAT --to-destination ${lumiose_ip}:7567 # gitea ssh + # iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 7567 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4} # gitea ssh + extraCommands = '' # Clear any previous rules if you are iterating iptables -t nat -F # DNAT: internet -> homelab over tailscale - iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 7567 -j DNAT --to-destination ${lumiose_ip}:7567 # gitea ssh iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25777 -j DNAT --to-destination ${lumiose_ip}:25777 # recpro mc iptables -t nat -A PREROUTING -i eth0 -p udp --dport 25777 -j DNAT --to-destination ${lumiose_ip}:25777 # recpro mc iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 25579 -j DNAT --to-destination ${snowbelle_ip}:25579 # craftoria mc iptables -t nat -A PREROUTING -i eth0 -p udp --dport 25580 -j DNAT --to-destination ${snowbelle_ip}:25580 # craftoria mc voice chat # SNAT: ensure replies go back through VPS tailscale IP - iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 7567 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4} # gitea ssh iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 25777 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4} # recpro mc iptables -t nat -A POSTROUTING -o tailscale0 -p udp --dport 25777 -d ${lumiose_ip}/32 -j SNAT --to-source ${vpsip4} # recpro mc iptables -t nat -A POSTROUTING -o tailscale0 -p tcp --dport 25579 -d ${snowbelle_ip}/32 -j SNAT --to-source ${vpsip4} # craftoria mc diff --git a/users/blake/hosts/vaniville.nix b/users/blake/hosts/vaniville.nix index 1e958b3..af5dcd1 100644 --- a/users/blake/hosts/vaniville.nix +++ b/users/blake/hosts/vaniville.nix @@ -28,7 +28,7 @@ in { # import snowbelle specific ssh keys programs.ssh.settings = lib.mkForce { "git.holocron.blue" = { - AddressFamily = "inet"; + #AddressFamily = "inet"; user = "gitea"; identityFile = "${home_dir}/.ssh/id_vaniville"; port = 7567;