liminix

commit ba03ddeb3891975c0a38aa28a73ffa8c5972f671
parent 493c5f69d7d36e6b651bea0c133e675239bccc94
Author: Daniel Barlow <dan@telent.net>
Date:   Sun,  6 Oct 2024 12:38:06 +0100

border-vm: add tang service

Diffstat:
M
bordervm-configuration.nix
 | 
13
+++++++++++++

1 file changed, 13 insertions(+), 0 deletions(-)
diff --git a/bordervm-configuration.nix b/bordervm-configuration.nix
@@ -102,6 +102,12 @@ in {
     systemd.services.sshd.wantedBy = pkgs.lib.mkForce [ "multi-user.target" ];
 
     virtualisation = {
+      forwardPorts = [ {
+        from = "host";
+        host.port = 7654;
+#        guest.address = "10.0.2.15";
+        guest.port =7654;
+      } ];
       qemu = {
         networkingOptions = [ ];
         options =
@@ -124,6 +130,12 @@ in {
         };
       };
     };
+
+    services.tang = {
+      enable = true;
+      ipAddressAllow = [ "10.0.0.0/24" "0.0.0.0/0" ];
+    };
+
     environment.systemPackages =
       let wireshark-nogui = pkgs.wireshark.override { withQt = false ; };
           in with pkgs; [
@@ -134,6 +146,7 @@ in {
             iptables
             usbutils
             busybox
+            clevis
           ];
     security.sudo.wheelNeedsPassword = false;
     networking = {