BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge pull request #144965 from mkg20001/ts-firewall

Browse source
This commit is contained in:
Maciej Krüger 2021-11-14 21:23:55 +01:00 committed by GitHub
commit dc19eaec1b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
nixos/modules/services/networking/teamspeak3.nix
View file

@ -43,7 +43,7 @@ in
voiceIP = mkOption { voiceIP = mkOption {
type = types.nullOr types.str; type = types.nullOr types.str;
default = null; default = null;
example = "0.0.0.0"; example = "[::]";
description = '' description = ''
IP on which the server instance will listen for incoming voice connections. Defaults to any IP. IP on which the server instance will listen for incoming voice connections. Defaults to any IP.
''; '';
@ -60,7 +60,7 @@ in
fileTransferIP = mkOption { fileTransferIP = mkOption {
type = types.nullOr types.str; type = types.nullOr types.str;
default = null; default = null;
example = "0.0.0.0"; example = "[::]";
description = '' description = ''
IP on which the server instance will listen for incoming file transfer connections. Defaults to any IP. IP on which the server instance will listen for incoming file transfer connections. Defaults to any IP.
''; '';
@ -91,6 +91,18 @@ in
''; '';
}; };
openFirewall = mkOption {
type = types.bool;
default = false;
description = "Open ports in the firewall for the TeamSpeak3 server.";
};
openFirewallServerQuery = mkOption {
type = types.bool;
default = false;
description = "Open ports in the firewall for the TeamSpeak3 serverquery (administration) system. Requires openFirewall.";
};
}; };
}; };
@ -115,6 +127,12 @@ in
"d '${cfg.logPath}' - ${user} ${group} - -" "d '${cfg.logPath}' - ${user} ${group} - -"
]; ];
networking.firewall = mkIf cfg.openFirewall {
allowedTCPPorts = [ cfg.fileTransferPort ] ++ optionals (cfg.openFirewallServerQuery) [ cfg.queryPort (cfg.queryPort + 11) ];
# subsequent vServers will use the incremented voice port, let's just open the next 10
allowedUDPPortRanges = [ { from = cfg.defaultVoicePort; to = cfg.defaultVoicePort + 10; } ];
};
systemd.services.teamspeak3-server = { systemd.services.teamspeak3-server = {
description = "Teamspeak3 voice communication server daemon"; description = "Teamspeak3 voice communication server daemon";
after = [ "network.target" ]; after = [ "network.target" ];