abonerib/bscpkgs
1
0
Fork 0
forked from rarias/bscpkgs
Code Pull Requests 1 Activity

Restrict DAC VPN to fox-ipmi machine only

Browse Source 
Reviewed-by: Aleix Boné <abonerib@bsc.es>
This commit is contained in:
Rodrigo Arias 2025-06-20 14:47:55 +02:00
parent 22a2e1b9e8
commit 7a52e1907c
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
m/module/vpn-dac.nix
View File

@ -26,8 +26,9 @@
auth-user-pass ${config.age.secrets.vpn-dac-login.path}
reneg-sec 0
# Ignore 10.0.0.0 route as is not needed
pull-filter ignore "route 10.0.0.0"
# Only route fox-ipmi
pull-filter ignore "route "
route 147.83.35.27 255.255.255.255
'';
};
};