hosts/leon/default.nix

@@ -36,7 +36,7 @@
     volumes = [ {
       image = "nix-store-overlay.img";
       mountPoint = config.microvm.writableStoreOverlay;
-      size = 3048;
+      size = 5048;
     } ];
   };
   nix.settings.auto-optimise-store = lib.mkForce false;
@@ -84,7 +84,10 @@
     allowedTCPPorts = [ 5000 22 53 80 8080 ];
     allowedUDPPorts = [ 5000 22 53 80 8080 18900 19900 ];  
   };
-
+	
+   #networking.firewall.extraCommands = ''
+   # 	iptables 
+   # '';
 #_______________________________Begin-VPN1-Server____________________________________
  
  networking.wireguard.interfaces = {
@@ -219,20 +222,25 @@ networking.wireguard.interfaces = {
 
 #-----------------------------ngin-X--------------------------------
 
-#  services.nginx = {
-#    listen 80;
-#	 enable = true;
-#    virtualHosts."bicospacetech.c3d2.de" = {
-#      default = true;
-#      forceSSL = true;
-#      enableACME = true;
-#      locations."/login" = {
-#        proxyPass = "http://10.10.11.1:80";
-#        proxyWebsockets = true;
-#      };
-#    };
+  services.nginx = {
+    listen 80;
+	 enable = true;
+    virtualHosts."bicospacetech.c3d2.de" = {
+      default = true;
+      forceSSL = true;
+      enableACME = true;
+      locations."/login" = {
+        proxyPass = "http://10.10.11.1:80";
+        proxyWebsockets = true;
+      };
+    };
 
 #-----------------------------ngin-X--------------------------------
 
+
+
+#--------------------------Up-Stream--------------------------------
+
+
 system.stateVersion = "22.05";
 }

hosts/leoncloud/default.nix

@@ -56,8 +56,6 @@
 
 
 # enable IP routing
-  boot.kernel.sysctl."net.ipv4.conf.all.forwarding" = 1;
-  boot.kernel.sysctl."net.ipv4.conf.default.forwarding" = 1;
 
   networking.firewall = {
     allowedTCPPorts = [ 80 443 22 53 14000 14500 15000  ];