zentralwerk/network
zentralwerk
/
network
12
4
Fork 2
Code Issues 3 Pull Requests 1 Releases Wiki Activity

upstream4: disable NAT reflection for 80+443/tcp 

enables us to rate-limit properly
This commit is contained in:
Astro 2023-01-12 21:56:26 +01:00
parent 7e3d4fa42a
commit 79afe62977
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/net/upstream.nix
View File

@ -31,15 +31,13 @@ in
upstream4 = rec { upstream4 = rec {
forwardPorts = [ forwardPorts = [
{ # http { # http
destination = "172.20.73.45"; destination = servHosts.public-access-proxy;
proto = "tcp"; proto = "tcp";
reflect = true;
sourcePort = 80; sourcePort = 80;
} }
{ # https { # https
destination = "172.20.73.45"; destination = servHosts.public-access-proxy;
proto = "tcp"; proto = "tcp";
reflect = true;
sourcePort = 443; sourcePort = 443;
} }
{ # gemini { # gemini