quitte: allow ldaps access

2023-11-28 23:00:41 +01:00 · 2023-11-28 23:00:41 +01:00 · fd5e0108f6
parent 2d73376a60
commit fd5e0108f6
1 changed files with 5 additions and 0 deletions
--- a/modules/ldap/default.nix
+++ b/modules/ldap/default.nix
@ -122,4 +122,9 @@ in
      };
    };
  };
+  networking.firewall = {
+    extraInputRules = ''
+      ip saddr { 141.30.86.192/26, 141.76.100.128/25 } tcp dport 636 accept comment "Allow ldaps access from office nets"
+    '';
+  };
 }