🚚 renaming
All checks were successful
Build all NixOS Configurations / nix build (push) Successful in 11m42s

This commit is contained in:
Ingolf Wagner 2024-09-13 14:36:17 +07:00
parent 7ef34db19b
commit f49730a0a9
Signed by: palo
GPG key ID: 76BF5F1928B9618B
3 changed files with 8 additions and 5 deletions

View file

@ -172,7 +172,7 @@
++ [ ++ [
./machines/${name}/configuration.nix ./machines/${name}/configuration.nix
nix-topology.nixosModules.default nix-topology.nixosModules.default
self.nixosModules.scan self.nixosModules.verify
]; ];
}; };
@ -377,7 +377,7 @@
clan-core.flakeModules.default clan-core.flakeModules.default
./nix/formatter.nix ./nix/formatter.nix
./nix/packages ./nix/packages
./nix/scan ./nix/verify
./nix/topology ./nix/topology
]; ];

View file

@ -2,7 +2,7 @@
{ {
imports = [ ]; imports = [ ];
flake.nixosModules.scan = { flake.nixosModules.verify = {
imports = [ ./module.nix ]; imports = [ ./module.nix ];
}; };
@ -15,14 +15,16 @@
}: }:
with lib; with lib;
{ {
apps.scan = { apps.verify = {
type = "app"; type = "app";
program = program =
let let
ports = machine: self.nixosConfigurations.${machine}.options.verify.closed.value.public.ports; ports = machine: self.nixosConfigurations.${machine}.options.verify.closed.value.public.ports;
domain = machine: self.nixosConfigurations.${machine}.options.verify.closed.value.public.domain; domain = machine: self.nixosConfigurations.${machine}.options.verify.closed.value.public.domain;
in in
pkgs.writers.writeBashBin "scan" ''
# todo : create an alert if one of the ports should not be accessible
pkgs.writers.writeBashBin "verify" ''
${pkgs.rustscan}/bin/rustscan --ports ${concatStringsSep "," (map toString (ports "orbi"))} --addresses ${domain "orbi"} --greppable ${pkgs.rustscan}/bin/rustscan --ports ${concatStringsSep "," (map toString (ports "orbi"))} --addresses ${domain "orbi"} --greppable
''; '';
}; };

View file

@ -12,6 +12,7 @@ with types;
domain to scan domain to scan
''; '';
}; };
# todo: make this an attrs so I know why port xyz should be closed.
ports = mkOption { ports = mkOption {
type = listOf int; type = listOf int;
description = '' description = ''