commit 09dc2d599e8831610ab03ba9429f23f6c0a406fe · kitten.sh/system

+1 -1

modules/router/nftables.nix

···

       31
       31
        
             };

     

       32
       32
        
       

     

       33
       33
        
             capturePorts = mkOption {

     

       34
       34
       -
               default = [ 53 123 ];

     

       34
       34
       +
               default = [ 53 ];

     

       35
       35
        
               description = "Ports to capture and redirect to router";

     

       36
       36
        
               type = types.listOf types.int;

     

       37
       37
        
             };

+5 -4

modules/router/timeserver.nix

···

       4
       4
        
       let

     

       5
       5
        
         cfg = config.modules.router;

     

       6
       6
        
       

     

       7
       7
       -
         intern = cfg.interfaces.internal;

     

       8
       8
       -
       

     

       9
       7
        
         bindDevices =

     

       10
       8
        
           strings.concatStringsSep "\n"

     

       11
       9
        
             (builtins.map (ifname: "binddevice ${ifname}")

     
···

       20
       18
        
         };

     

       21
       19
        
       

     

       22
       20
        
         config = mkIf cfg.timeserver.enable {

     

       23
       23
       -
           networking.timeServers = [ "time.cloudflare.com" ];

     

       21
       21
       +
           networking.timeServers = [

     

       22
       22
       +
             "time.cloudflare.com"

     

       23
       23
       +
             "time.google.com"

     

       24
       24
       +
           ];

     

       24
       25
        
       

     

       25
       26
        
           services.chrony = {

     

       26
       27
        
             enable = true;

     

       27
       28
        
             enableNTS = true;

     

       28
       29
        
             extraConfig = ''

     

       29
       29
       -
               allow ${intern.cidr}

     

       30
       30
       +
               allow all

     

       30
       31
        
               ${bindDevices}

     

       31
       32
        
             '';

     

       32
       33
        
           };