From b1bad25008188f2ba98060129ae756ad8580407a Mon Sep 17 00:00:00 2001
From: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
Date: Fri, 29 Aug 2025 14:55:53 +0200
Subject: [PATCH] Accept connections from apex to fox slurmd

Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
---
 m/fox/wireguard.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/m/fox/wireguard.nix b/m/fox/wireguard.nix
index a16f1528..d10703db 100644
--- a/m/fox/wireguard.nix
+++ b/m/fox/wireguard.nix
@@ -36,4 +36,11 @@
   networking.hosts = {
     "10.100.0.30" = [ "apex" ];
   };
+
+  networking.firewall = {
+    extraCommands = ''
+      # Accept slurm connections to slurmd from apex (via wireguard)
+      iptables -A nixos-fw -p tcp -i wg0 -s 10.100.0.30/32 -d 10.100.0.1/32 --dport 6818 -j nixos-fw-accept
+    '';
+  };
 }