forked from hacc/haccfiles
stuebinm
0f678c5e80
this removes usage of the nftnat module by rendering it into a static nftables config. It's a no-op (modulo /etc/haccfiles) as far as nix is concerned, hence the slightly off-putting whitespace of the multi-line string. This seems to me to be a better approach than just bundling the module, since we only use it for two things (giving the containers network access & forwarding port 22 to forgejo), which to me doesn't press for using a custom module we can't really maintain on our own. |
||
---|---|---|
.. | ||
configuration.nix | ||
forgejo.nix | ||
hardware.nix | ||
hedgedoc-hacc.nix | ||
hedgedoc-i4f.nix | ||
lxc.nix | ||
mail.nix | ||
mattermost.nix | ||
murmur.nix | ||
nextcloud.nix | ||
nftables.nix | ||
nginx-pages.nix | ||
tracktrain.nix | ||
uffd.nix | ||
vaultwarden.nix |