mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

nix: move the egress firewall options under deploy.hive-controller.egress

Browse source
This commit is contained in:
damocles 2026-11-14 18:38:47 +01:00 • committed by mara
commit 7468aa4cff
1 changed files with 148 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/host-modules/hive-squid.nix
View file

@ -42,7 +42,7 @@ let
listen = "${netCfg.bridgeIp}:${toString port}";
proxyUrl = "http://${netCfg.bridgeIp}:${toString port}";
exporterListen = "127.0.0.1:9301";
interceptCfg = netCfg.egress.intercept;
interceptCfg = hyperhiveCfg.deploy.hive-controller.egress.intercept;
# The path every platform container's unit runs hive-priv by (hive-priv.nix
# points it at the current build). Squid runs `egress-whois` through it.
hivePriv = (import ./lib/container-rootfs-check.nix { inherit config; }).hivePriv;
@ -551,7 +551,7 @@ in
interceptCfg.httpPort
interceptCfg.httpsPort
];
services.hyperhive.network.egress.intercept = {
services.hyperhive.deploy.hive-controller.egress.intercept = {
enable = lib.mkDefault true;
inherit (cfg) unrestrictedFile agentAllowFile;
};