Add firewall rules to slurm server

Reviewed-by: Aleix Boné <abonerib@bsc.es>
2025-08-27 12:59:21 +02:00 · 2025-08-27 12:59:21 +02:00 · 5a51b28268
commit 5a51b28268
parent 46ef8f8aea
1 changed files with 9 additions and 0 deletions
--- a/m/module/slurm-server.nix
+++ b/m/module/slurm-server.nix
@ -6,4 +6,13 @@
  ];

  services.slurm.server.enable = true;
+
+  networking.firewall = {
+    extraCommands = ''
+      # Accept slurm connections to controller from compute nodes
+      iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 6817 -j nixos-fw-accept
+      # Accept slurm connections from compute nodes for srun
+      iptables -A nixos-fw -p tcp -s 10.0.40.0/24 --dport 60000:61000 -j nixos-fw-accept
+    '';
+  };
 }