mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

nix: move the egress firewall options under deploy.hive-controller.egress

Browse source
This commit is contained in:
damocles 2026-11-14 18:38:47 +01:00 • committed by mara
commit 7468aa4cff
2 changed files with 148 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nix/vm-tests/hive-egress-antispoof.nix
View file

@ -160,7 +160,7 @@ pkgs.testers.runNixOSTest {
containers.b = container;
specialisation.logmode.configuration = {
services.hyperhive.network.egress.antiSpoof = lib.mkForce "log";
services.hyperhive.deploy.hive-controller.egress.antiSpoof = lib.mkForce "log";
};
};

3
nix/vm-tests/hive-squid.nix
View file

@ -228,7 +228,8 @@ pkgs.testers.runNixOSTest {
# The reject-mode half of the test switches to this at its end. The
# forward mode is fixed when the node evaluates; the switch reloads
# `hive-egress` with the other ruleset.
specialisation.reject.configuration.services.hyperhive.network.egress.forward = "reject";
specialisation.reject.configuration.services.hyperhive.deploy.hive-controller.egress.forward =
"reject";
services.hyperhive.deploy.hive-controller.squid.selfcheck.unrestrictedCanary = "other.t.local";
services.hyperhive.deploy.hive-controller.squid.selfcheck.canary = "cache.t.local";
services.hyperhive.deploy.hive-controller.squid.baseAllowedDomains = [