clan/clan-core
11
2
Fork 13
Code Issues 91 Pull Requests 6 Actions Packages Projects 1 Releases Wiki Activity

zerotier: document mdns ports; drop duplicate udp firewall rules
All checks were successful
checks-impure / test (pull_request) Successful in 8s
Details
checks / test (pull_request) Successful in 27s
Details

Browse Source 
the nixos module already opens the zerotier port
This commit is contained in:
Jörg Thalheim 2023-09-28 17:58:27 +02:00
parent be6592c82c
commit 739d3b3578
2 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
nixosModules/clanCore/zerotier/default.nix
View File

@ -79,9 +79,10 @@ in
KeepConfiguration = "static";
};
};
networking.firewall.allowedUDPPorts = [ 9993 ];
networking.firewall.interfaces."zt+".allowedTCPPorts = [ 5353 ];
networking.firewall.interfaces."zt+".allowedUDPPorts = [ 5353 ];
networking.firewall.interfaces."zt+".allowedTCPPorts = [ 5353 ]; # mdns
networking.firewall.interfaces."zt+".allowedUDPPorts = [ 5353 ]; # mdns
networking.networkmanager.unmanaged = [ "interface-name:zt*" ];
services.zerotierone = {
enable = true;
joinNetworks = [ cfg.networkId ];

7
pkgs/clan-cli/tests/test_secrets_generate.py
View File

@ -41,5 +41,10 @@ def test_upload_secret(
assert age_key.lstat().st_mtime_ns == age_key_mtime
assert identity_secret.lstat().st_mtime_ns == secret1_mtime
machine_path = sops_secrets_folder().joinpath("vm1-zerotier-identity-secret").joinpath("machines").joinpath("vm1")
machine_path = (
sops_secrets_folder()
.joinpath("vm1-zerotier-identity-secret")
.joinpath("machines")
.joinpath("vm1")
)
assert machine_path.exists()