Some networking fixes.

2025-12-18 22:28:03 -05:00
parent a5e2eaee80
commit 9608d33557
33 changed files with 1806 additions and 1722 deletions
--- a/nix/kubernetes/roles/cilium/default.nix
+++ b/nix/kubernetes/roles/cilium/default.nix
@@ -0,0 +1,29 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [ ];
+
+  options.me = {
+    cilium.enable = lib.mkOption {
+      type = lib.types.bool;
+      default = false;
+      example = true;
+      description = "Whether we want to install cilium.";
+    };
+  };
+
+  config = lib.mkIf config.me.cilium.enable {
+    networking.firewall.allowedTCPPorts = [
+      4240 # Health checks
+    ];
+    networking.firewall.allowedUDPPorts = [
+      8472 # vxlan
+      51871 # wireguard
+    ];
+  };
+}