aboutsummaryrefslogtreecommitdiff
path: root/modules/quassel
diff options
context:
space:
mode:
authorMax Audron <audron@cocaine.farm>2025-07-30 16:53:40 +0200
committerMax Audron <audron@cocaine.farm>2025-07-30 16:53:40 +0200
commit80abf0577c962e8d5a71e586f020953f939d90c6 (patch)
treedac85c2a5d5d99cbb2fb61824924ddbe8a113042 /modules/quassel
parentadd initial prometheus deployment (diff)
enable firewalls
Diffstat (limited to 'modules/quassel')
-rw-r--r--modules/quassel/default.nix1
-rw-r--r--modules/quassel/quassel.nix10
2 files changed, 11 insertions, 0 deletions
diff --git a/modules/quassel/default.nix b/modules/quassel/default.nix
index 52880c8..ceeb3b0 100644
--- a/modules/quassel/default.nix
+++ b/modules/quassel/default.nix
@@ -19,6 +19,7 @@ in
services.quassel = {
enable = true;
package = quassel;
+ openFirewall = true;
extraGroups = [ "acme" ];
settings = {
listen = [ "178.63.224.10" "2a01:4f8:231:56a::10" ];
diff --git a/modules/quassel/quassel.nix b/modules/quassel/quassel.nix
index e8ef580..9a31c32 100644
--- a/modules/quassel/quassel.nix
+++ b/modules/quassel/quassel.nix
@@ -38,6 +38,14 @@ in
Useful for e.g. access to acme certificates.
'';
};
+
+ openFirewall = mkOption {
+ type = types.bool;
+ default = false;
+ description = lib.mdDoc ''
+ Open the firewall for the port defined in {option}`services.quassel.settings.port`
+ '';
+ };
environmentFile = mkOption {
type = types.nullOr types.path;
@@ -430,6 +438,8 @@ in
}
];
+ networking.firewall.allowedTCPPorts = lib.mkIf cfg.openFirewall [ cfg.settings.port cfg.settings.ident.port ];
+
systemd.services.quassel =
{
description = "Quassel IRC client daemon";