feat: allow smb access from fritz-vlan
This commit is contained in:
parent
1b983b62d1
commit
e15f7aaf4d
|
@ -41,8 +41,8 @@
|
|||
];
|
||||
};
|
||||
user_rules = [
|
||||
"||homematic.internal^$dnsrewrite=${lib.net.cidr.host 30 globals.net.vlans.devices.cidrv4}"
|
||||
"||testberry.internal^$dnsrewrite=${lib.net.cidr.host 31 globals.net.vlans.devices.cidrv4}"
|
||||
# "||homematic.internal^$dnsrewrite=${lib.net.cidr.host 30 globals.net.vlans.devices.cidrv4}"
|
||||
# "||testberry.internal^$dnsrewrite=${lib.net.cidr.host 31 globals.net.vlans.devices.cidrv4}"
|
||||
"||smb.internal^$dnsrewrite=${lib.net.cidr.host globals.services.samba.ip globals.net.vlans.home.cidrv4}"
|
||||
"||${globals.domains.web}^$dnsrewrite=${lib.net.cidr.host 1 globals.net.vlans.services.cidrv4}"
|
||||
"@@||${globals.services.vaultwarden.domain}"
|
||||
|
|
|
@ -62,9 +62,7 @@
|
|||
networks.wlan01 = {
|
||||
inherit (globals.hostapd) ssid;
|
||||
apIsolate = true;
|
||||
# not supporte by laptop :(
|
||||
#settings.ieee80211w = 0;
|
||||
logLevel = 0;
|
||||
#logLevel = 0;
|
||||
settings = {
|
||||
bridge = "br-iot";
|
||||
};
|
||||
|
|
|
@ -171,6 +171,7 @@ in
|
|||
printer-smb = {
|
||||
from = [
|
||||
"printer"
|
||||
"fritz"
|
||||
];
|
||||
to = [ "smb" ];
|
||||
allowedTCPPorts = [ 445 ];
|
||||
|
@ -200,8 +201,10 @@ in
|
|||
from = [
|
||||
"home"
|
||||
"devices"
|
||||
"fritz"
|
||||
"guests"
|
||||
"services"
|
||||
"fritz"
|
||||
];
|
||||
to = [ "adguard" ];
|
||||
allowedUDPPorts = [ 53 ];
|
||||
|
|
Loading…
Reference in a new issue