services: add helper fn setAllowedIPAddresses

Also use 'allowLocalIPAddresses' instead of 'allowTor' in bitcoind-import-banlist which doesn't use Tor.
2021-03-22 13:20:45 +01:00
parent cdf27d9d0c
commit 020433cec6
11 changed files with 22 additions and 45 deletions
@@ -83,9 +83,7 @@ in {
        ExecStart = "${pkgs.bash}/bin/bash ${recurring-donations-script}";
        User = "recurring-donations";
        Type = "oneshot";
-      } // (if cfg.enforceTor
-            then nbLib.allowTor
-            else nbLib.allowAnyIP);
+      } // nbLib.allowedIPAddresses cfg.enforceTor;
    };
    systemd.timers.recurring-donations = {
      requires = [ "clightning.service" ];