From 374cd4ce480f4e1490b4a98c3d25347cf4d7c660 Mon Sep 17 00:00:00 2001 From: Rodrigo Arias Mallo Date: Thu, 5 Mar 2026 16:12:38 +0100 Subject: [PATCH] Allow tent to reach ceph MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Reviewed-by: Aleix Boné --- m/bay/configuration.nix | 2 +- m/lake2/configuration.nix | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/m/bay/configuration.nix b/m/bay/configuration.nix index 7bdfe740..9bb353eb 100644 --- a/m/bay/configuration.nix +++ b/m/bay/configuration.nix @@ -35,7 +35,7 @@ # Accept monitoring requests from hut iptables -A nixos-fw -p tcp -s hut -m multiport --dport 9283,9002 -j nixos-fw-accept # Accept all Ceph traffic from the local network - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 -m multiport --dport 3300,6789,6800:7568 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 -m multiport --dport 3300,6789,6800:7568 -j nixos-fw-accept ''; }; }; diff --git a/m/lake2/configuration.nix b/m/lake2/configuration.nix index 477cf59c..338c2d40 100644 --- a/m/lake2/configuration.nix +++ b/m/lake2/configuration.nix @@ -57,7 +57,7 @@ # Accept monitoring requests from hut iptables -A nixos-fw -p tcp -s hut --dport 9002 -j nixos-fw-accept # Accept all Ceph traffic from the local network - iptables -A nixos-fw -p tcp -s 10.0.40.0/24 -m multiport --dport 3300,6789,6800:7568 -j nixos-fw-accept + iptables -A nixos-fw -p tcp -s 10.0.40.0/21 -m multiport --dport 3300,6789,6800:7568 -j nixos-fw-accept ''; }; };