nixos-module/container/dnscache: allow flpk ipv6 and yggdrasil
This commit is contained in:
parent
5041624b6c
commit
31bcdb92d2
|
@ -49,8 +49,10 @@ lib.mkIf config.site.hosts.${hostName}.services.dnscache.enable {
|
||||||
]
|
]
|
||||||
[ # flpk
|
[ # flpk
|
||||||
"${config.site.net.flpk.subnet4} allow"
|
"${config.site.net.flpk.subnet4} allow"
|
||||||
|
"2a0f:5382:acab:1400::/56 allow"
|
||||||
]
|
]
|
||||||
(map (s: "${s} allow") (builtins.attrValues config.site.net.flpk.subnets6))
|
# yggdrasil
|
||||||
|
"${config.site.net.c3d2.subnets6.subnets6.yggdrasil} allow"
|
||||||
[ # default
|
[ # default
|
||||||
"0.0.0.0/0 deny"
|
"0.0.0.0/0 deny"
|
||||||
"::/0 deny"
|
"::/0 deny"
|
||||||
|
|
Loading…
Reference in New Issue