forked from hacc/haccfiles
stuebinm
0f678c5e80
this removes usage of the nftnat module by rendering it into a static nftables config. It's a no-op (modulo /etc/haccfiles) as far as nix is concerned, hence the slightly off-putting whitespace of the multi-line string. This seems to me to be a better approach than just bundling the module, since we only use it for two things (giving the containers network access & forwarding port 22 to forgejo), which to me doesn't press for using a custom module we can't really maintain on our own. |
||
|---|---|---|
| .. | ||
| configuration.nix | ||
| forgejo.nix | ||
| hardware.nix | ||
| hedgedoc-hacc.nix | ||
| hedgedoc-i4f.nix | ||
| lxc.nix | ||
| mail.nix | ||
| mattermost.nix | ||
| murmur.nix | ||
| nextcloud.nix | ||
| nftables.nix | ||
| nginx-pages.nix | ||
| tracktrain.nix | ||
| uffd.nix | ||
| vaultwarden.nix | ||