From b2bf32dc732b49c9b6eb30c4c0c3f78474543622 Mon Sep 17 00:00:00 2001
From: Jonas Juselius <jonas.juselius@tromso.serit.no>
Date: Fri, 26 Sep 2025 15:54:24 +0200
Subject: [PATCH] fix: fix tailscale routing, etc.

---
 ekman/default.nix        |   3 +++
 ekman/jwt_hs256.key      | Bin 0 -> 32 bytes
 ekman/login/default.nix  |   4 ++--
 ekman/manage/default.nix |   1 +
 4 files changed, 6 insertions(+), 2 deletions(-)
 create mode 100644 ekman/jwt_hs256.key

diff --git a/ekman/default.nix b/ekman/default.nix
index 71adbc2..9666deb 100644
--- a/ekman/default.nix
+++ b/ekman/default.nix
@@ -108,6 +108,7 @@ let
       firewall.extraCommands = ''
         iptables -I INPUT -s 10.255.241.0/24 -j ACCEPT
         iptables -I INPUT -s 10.255.243.0/24 -j ACCEPT
+        iptables -I INPUT -s 100.64.0.0/24 -j ACCEPT
       '';
     };
 
@@ -143,7 +144,9 @@ let
     features.hpc.slurm = {
         enable = true;
         client = true;
+        # clusterName = "ekman";
         mungeKey = ./munge.key;
+        # jwtKey = ./jwt_hs256.key;
         mungeUid = mkDefault 996; # hack
         # pkey = "0x7666";
         controlMachine = "ekman-manage";
diff --git a/ekman/jwt_hs256.key b/ekman/jwt_hs256.key
new file mode 100644
index 0000000000000000000000000000000000000000..a2bde129b5e48486fb0e253aa3531b7789c0a54f
GIT binary patch
literal 32
qcmV+*0N?*StEsP{yEKxd`VAjYq$#Zca0HAS^D3a#UU`+UncTkp_7Cy^

literal 0
HcmV?d00001

diff --git a/ekman/login/default.nix b/ekman/login/default.nix
index aa1eea0..084e836 100644
--- a/ekman/login/default.nix
+++ b/ekman/login/default.nix
@@ -26,7 +26,7 @@ in
         opt = false;
         work = true;
         data = true;
-        backup = true;
+        backup =false;
         ceph = true;
       };
     };
@@ -338,7 +338,7 @@ in
         "--login-server=https://headscale.svc.oceanbox.io"
         "--accept-dns"
         "--advertise-exit-node"
-        "--advertise-routes=10.255.241.241.0/24"
+        "--advertise-routes=10.255.241.0/24"
         "--advertise-tags=tag:ekman"
       ];
     };
diff --git a/ekman/manage/default.nix b/ekman/manage/default.nix
index 120f870..886b1ce 100644
--- a/ekman/manage/default.nix
+++ b/ekman/manage/default.nix
@@ -325,6 +325,7 @@ in {
       "--login-server=https://headscale.svc.oceanbox.io"
       "--accept-dns=false"
       "--advertise-exit-node"
+      "--advertise-routes=10.255.241.0/24"
     ];
   };