death916/nixconfig
1
0
Fork 0
mirror of https://github.com/Death916/nixconfig.git synced 2026-04-10 02:54:39 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

ts whitelist

Browse source
This commit is contained in:
death916 2026-01-18 03:08:14 -08:00
parent 2709a098c2
commit a79be91c41
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
modules/containers/docker/crowdsec/crowdsec.nix
View file

@ -32,6 +32,15 @@ let
labels:
type: syslog
'';
whitelistYaml = pkgs.writeText "tailscale-whitelist.yaml" ''
name: my/tailscale_whitelist
description: "Whitelist Tailscale IPs"
whitelist:
reason: "Tailscale / Internal"
ip:
- "100.64.0.0/10"
'';
in
{
virtualisation.docker.enable = true;
@ -59,6 +68,7 @@ in
"/run/log/journal:/run/log/journal:ro"
"/etc/machine-id:/etc/machine-id:ro"
"${acquisYaml}:/etc/crowdsec/acquis.yaml"
"${whitelistYaml}:/etc/crowdsec/parsers/s02-enrich/tailscale-whitelist.yaml"
];
};