zentralwerk/network
zentralwerk
/
network
12
4
Fork 2
Code Issues 3 Pull Requests 1 Releases Wiki Activity

upstream4: disable NAT reflection for 80+443/tcp 

enables us to rate-limit properly
This commit is contained in:
Astro 2023-01-12 21:56:26 +01:00
parent 7e3d4fa42a
commit 79afe62977
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/net/upstream.nix
View File

@ -31,15 +31,13 @@ in
upstream4 = rec {
forwardPorts = [
{ # http
destination = "172.20.73.45";
destination = servHosts.public-access-proxy;
proto = "tcp";
reflect = true;
sourcePort = 80;
}
{ # https
destination = "172.20.73.45";
destination = servHosts.public-access-proxy;
proto = "tcp";
reflect = true;
sourcePort = 443;
}
{ # gemini