42 lines
964 B
Nix
42 lines
964 B
Nix
{
|
|
system,
|
|
inputs,
|
|
...
|
|
}: {
|
|
networking = {
|
|
firewall = {
|
|
allowedTCPPorts = [9000 30303];
|
|
allowedUDPPorts = [9000 30303];
|
|
logRefusedConnections = true;
|
|
trustedInterfaces = ["microvm"];
|
|
};
|
|
};
|
|
services.ethereum.geth.mainnet = {
|
|
enable = true;
|
|
package = inputs.ethereum-nix.packages.${system}.geth;
|
|
openFirewall = false;
|
|
args = {
|
|
http = {
|
|
enable = true;
|
|
addr = "10.0.0.1";
|
|
};
|
|
authrpc.jwtsecret = "/etc/nixos/eth_jwt";
|
|
};
|
|
};
|
|
services.ethereum.nimbus-beacon.mainnet = {
|
|
enable = true;
|
|
package = inputs.ethereum-nix.packages.${system}.nimbus;
|
|
openFirewall = false;
|
|
args = {
|
|
user = "nimbus";
|
|
jwt-secret = "/etc/nixos/eth_jwt";
|
|
trusted-node-url = "https://sync.invis.tools";
|
|
enr-auto-update = true;
|
|
rest = {
|
|
enable = true;
|
|
address = "10.0.0.1";
|
|
};
|
|
light-client-data.max-periods = "3";
|
|
};
|
|
};
|
|
}
|