fix: fix tailscale routing, etc.

This commit is contained in:
Jonas Juselius
2025-09-26 15:54:24 +02:00
parent 312b3906ab
commit b2bf32dc73
4 changed files with 6 additions and 2 deletions

View File

@@ -108,6 +108,7 @@ let
firewall.extraCommands = '' firewall.extraCommands = ''
iptables -I INPUT -s 10.255.241.0/24 -j ACCEPT iptables -I INPUT -s 10.255.241.0/24 -j ACCEPT
iptables -I INPUT -s 10.255.243.0/24 -j ACCEPT iptables -I INPUT -s 10.255.243.0/24 -j ACCEPT
iptables -I INPUT -s 100.64.0.0/24 -j ACCEPT
''; '';
}; };
@@ -143,7 +144,9 @@ let
features.hpc.slurm = { features.hpc.slurm = {
enable = true; enable = true;
client = true; client = true;
# clusterName = "ekman";
mungeKey = ./munge.key; mungeKey = ./munge.key;
# jwtKey = ./jwt_hs256.key;
mungeUid = mkDefault 996; # hack mungeUid = mkDefault 996; # hack
# pkey = "0x7666"; # pkey = "0x7666";
controlMachine = "ekman-manage"; controlMachine = "ekman-manage";

BIN
ekman/jwt_hs256.key Normal file

Binary file not shown.

View File

@@ -26,7 +26,7 @@ in
opt = false; opt = false;
work = true; work = true;
data = true; data = true;
backup = true; backup =false;
ceph = true; ceph = true;
}; };
}; };
@@ -338,7 +338,7 @@ in
"--login-server=https://headscale.svc.oceanbox.io" "--login-server=https://headscale.svc.oceanbox.io"
"--accept-dns" "--accept-dns"
"--advertise-exit-node" "--advertise-exit-node"
"--advertise-routes=10.255.241.241.0/24" "--advertise-routes=10.255.241.0/24"
"--advertise-tags=tag:ekman" "--advertise-tags=tag:ekman"
]; ];
}; };

View File

@@ -325,6 +325,7 @@ in {
"--login-server=https://headscale.svc.oceanbox.io" "--login-server=https://headscale.svc.oceanbox.io"
"--accept-dns=false" "--accept-dns=false"
"--advertise-exit-node" "--advertise-exit-node"
"--advertise-routes=10.255.241.0/24"
]; ];
}; };