2021-03-05 17:42:00 +01:00
|
|
|
{ config, ... }: {
|
2019-10-24 02:20:38 +02:00
|
|
|
# make sure ssh is only available trough the tinc
|
2021-03-05 17:42:00 +01:00
|
|
|
networking.firewall.extraCommands = ''
|
|
|
|
|
iptables --table nat --append PREROUTING ! --in-interface tinc.+ --protocol tcp --match tcp --dport 22 --jump REDIRECT --to-ports 0
|
|
|
|
|
'';
|
2019-10-24 02:20:38 +02:00
|
|
|
}
|
