pyrox.dev
nixos/tests/keepalived: use openFirewall option
Instead of networking.firewall.extraCommands.
+2
-2
nixos/tests/keepalived.nix
+2
-2
nixos/tests/keepalived.nix
···
4
4
5
5
nodes = {
6
6
node1 = { pkgs, ... }: {
7
-
networking.firewall.extraCommands = "iptables -A INPUT -p vrrp -j ACCEPT";
8
7
services.keepalived.enable = true;
8
+
services.keepalived.openFirewall = true;
9
9
services.keepalived.vrrpInstances.test = {
10
10
interface = "eth1";
11
11
state = "MASTER";
···
16
16
environment.systemPackages = [ pkgs.tcpdump ];
17
17
};
18
18
node2 = { pkgs, ... }: {
19
-
networking.firewall.extraCommands = "iptables -A INPUT -p vrrp -j ACCEPT";
20
19
services.keepalived.enable = true;
20
+
services.keepalived.openFirewall = true;
21
21
services.keepalived.vrrpInstances.test = {
22
22
interface = "eth1";
23
23
state = "MASTER";