feat: allow tailnet access
This commit is contained in:
@@ -106,6 +106,7 @@ let
|
||||
firewall.extraCommands = ''
|
||||
iptables -I INPUT -s 172.16.239.0/24 -j ACCEPT
|
||||
iptables -I INPUT -s 10.1.6.0/24 -j ACCEPT
|
||||
iptables -I INPUT -s 10.64.0.0/24 -j ACCEPT
|
||||
'';
|
||||
};
|
||||
|
||||
@@ -142,13 +143,15 @@ let
|
||||
enable = true;
|
||||
client = true;
|
||||
mungeKey = ./munge.key;
|
||||
jwtKey = ./jwt_hs256.key;
|
||||
mungeUid = mkDefault 994; # hack
|
||||
# slurmUid = mkDefault 307; # hack
|
||||
# pkey = "0x7666";
|
||||
controlMachine = "rossby-manage";
|
||||
mailDomain = "oceanbox.io";
|
||||
nodeName = [
|
||||
"c0-[1-20] Sockets=2 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=382000 TmpDisk=400000 State=UNKNOWN"
|
||||
"rossby-login Sockets=1 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=60000 TmpDisk=400000 State=UNKNOWN"
|
||||
"rossby-login Sockets=1 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=40000 TmpDisk=400000 State=UNKNOWN"
|
||||
"rossby-manage Sockets=1 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=60000 TmpDisk=400000 State=UNKNOWN"
|
||||
];
|
||||
partitionName = [
|
||||
|
||||
Reference in New Issue
Block a user