feat: allow tailnet access
This commit is contained in:
@@ -106,6 +106,7 @@ let
|
|||||||
firewall.extraCommands = ''
|
firewall.extraCommands = ''
|
||||||
iptables -I INPUT -s 172.16.239.0/24 -j ACCEPT
|
iptables -I INPUT -s 172.16.239.0/24 -j ACCEPT
|
||||||
iptables -I INPUT -s 10.1.6.0/24 -j ACCEPT
|
iptables -I INPUT -s 10.1.6.0/24 -j ACCEPT
|
||||||
|
iptables -I INPUT -s 10.64.0.0/24 -j ACCEPT
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
@@ -142,13 +143,15 @@ let
|
|||||||
enable = true;
|
enable = true;
|
||||||
client = true;
|
client = true;
|
||||||
mungeKey = ./munge.key;
|
mungeKey = ./munge.key;
|
||||||
|
jwtKey = ./jwt_hs256.key;
|
||||||
mungeUid = mkDefault 994; # hack
|
mungeUid = mkDefault 994; # hack
|
||||||
|
# slurmUid = mkDefault 307; # hack
|
||||||
# pkey = "0x7666";
|
# pkey = "0x7666";
|
||||||
controlMachine = "rossby-manage";
|
controlMachine = "rossby-manage";
|
||||||
mailDomain = "oceanbox.io";
|
mailDomain = "oceanbox.io";
|
||||||
nodeName = [
|
nodeName = [
|
||||||
"c0-[1-20] Sockets=2 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=382000 TmpDisk=400000 State=UNKNOWN"
|
"c0-[1-20] Sockets=2 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=382000 TmpDisk=400000 State=UNKNOWN"
|
||||||
"rossby-login Sockets=1 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=60000 TmpDisk=400000 State=UNKNOWN"
|
"rossby-login Sockets=1 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=40000 TmpDisk=400000 State=UNKNOWN"
|
||||||
"rossby-manage Sockets=1 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=60000 TmpDisk=400000 State=UNKNOWN"
|
"rossby-manage Sockets=1 CoresPerSocket=64 ThreadsPerCore=2 RealMemory=60000 TmpDisk=400000 State=UNKNOWN"
|
||||||
];
|
];
|
||||||
partitionName = [
|
partitionName = [
|
||||||
|
|||||||
Reference in New Issue
Block a user