Restrict DAC VPN to fox-ipmi machine only

Reviewed-by: Aleix Boné <abonerib@bsc.es>
2025-06-20 14:47:55 +02:00 · 2025-06-20 14:47:55 +02:00 · 70da31ed03
commit 70da31ed03
parent 3672c04980
1 changed files with 3 additions and 2 deletions
--- a/m/module/vpn-dac.nix
+++ b/m/module/vpn-dac.nix
@ -26,8 +26,9 @@
        auth-user-pass ${config.age.secrets.vpn-dac-login.path}
        reneg-sec 0

-	# Ignore 10.0.0.0 route as is not needed
-        pull-filter ignore "route 10.0.0.0"
+        # Only route fox-ipmi
+        pull-filter ignore "route "
+        route 147.83.35.27 255.255.255.255
      '';
    };
  };