@cryptotaxi247 / infra-1 / commits / 7c471fee

* Open port 10050 (Zabbix) in the firewall.

svn path=/configurations/trunk/tud/; revision=34681

Eelco Dolstra committed Jan 17, 2013 at 14:46 UTC 7c471fee504afab0c2804ffe230a301b36678772
3 files changed +3 -2
cartman.nix
+1 -1
@@ -295,7 +295,7 @@ rec {
295 #"15 0 * * * root (TZ=CET date; ${pkgs.rsync}/bin/rsync -razv --numeric-ids --delete /data/postgresql /data/webserver/tarballs unixhome.st.ewi.tudelft.nl::bfarm/) >> /var/log/backup.log 2>&1"
296 "* * * * * root ${pkgs.python}/bin/python ${ZabbixApacheUpdater} -z 192.168.1.5 -c cartman"
297 "40 * * * * root ${duplicityBackup} &>> /var/log/backup-duplicity.log"
298 - "30 1 * * * root ${config.system.build.systemd}/bin/systemctl start mirror-tarballs.service"
298 + "30 1 * * * root ${config.systemd.package}/bin/systemctl start mirror-tarballs.service"
299
300 # Force the sixxs tunnel to stay alive by periodically
301 # pinging the other side. This is necessary to remain
common.nix
+1
@@ -73,6 +73,7 @@ with pkgs.lib;
73 networking.firewall.enable = true;
74 networking.firewall.rejectPackets = true;
75 networking.firewall.allowPing = true;
76 + networking.firewall.allowedTCPPorts = [ 10050 ];
77
78 # Bump the open files limit so that non-root users can run NixOS VM
79 # tests (Samba opens lot of files).
stan.nix
+1 -1
@@ -16,7 +16,7 @@
16 services.httpd.adminAddr = "foo@example.org";
17
18 networking.firewall.enable = false;
19 - networking.firewall.allowedTCPPorts = [ 80 10050 ];
19 + networking.firewall.allowedTCPPorts = [ 80 ];
20 networking.firewall.rejectPackets = true;
21 networking.firewall.allowPing = true;
22