parameterize main nic and dmz bridge interface names

firewall some services to particular interfaces
2024-01-13 00:05:25 +01:00 · 2024-01-13 00:05:25 +01:00 · 76501362f7
commit 76501362f7
parent 6bcdd774ac
5 changed files with 44 additions and 28 deletions
--- a/nixos/modules/terraform-database/default.nix
+++ b/nixos/modules/terraform-database/default.nix
@ -10,7 +10,7 @@ in {
  };

  config = lib.mkIf cfg.enable {
-    networking.firewall.allowedTCPPorts = [ 5432 ];
+    networking.firewall.interfaces.${config.lab.networking.mainNicNamePattern}.allowedTCPPorts = [ 5432 ];

    services.postgresql = {
      enable = true;