Use IPAddress{Allow,Deny} by default for systemd services

2019-04-28 13:15:17 +00:00
parent d9533edad1
commit eaaf8e9aab
12 changed files with 79 additions and 22 deletions
@@ -3,7 +3,7 @@
 with lib;

 let
-  nix-bitcoin-services = import ./nix-bitcoin-services.nix;
+  nix-bitcoin-services = pkgs.callPackage ./nix-bitcoin-services.nix { };
  cfg = config.services.nanopos;
  defaultItemsFile = pkgs.writeText "items.yaml" ''
    tea:
@@ -74,7 +74,9 @@ in {
        User = "nanopos";
        Restart = "on-failure";
        RestartSec = "10s";
-      } // nix-bitcoin-services.nodeHardening;
+      } // nix-bitcoin-services.defaultHardening
+        // nix-bitcoin-services.node
+        // nix-bitcoin-services.allowTor;
    };
  };
 }