Closed with #105 but i don't think its useful for our purposes so i might remove it again
Port-forwarding would probably be the easiest option but if we give some (all) vms their own ips we could setup dns to access services which is nicer than remembering port numbers.
https://riseup.net/en/security/network-security/tor/onionservices-best-practices
Do not run a relay and an onion service on the same instance. Having a relay and an onion service on same IP…
I think if we have to do smb for the printer just focus on that. Linux support for smb shares is good enough (and securing nfs properly would require us to set up samba anyways)
Ive only set it up once for a windows vm:
services.samba = {
enable = true;
openFirewall = true;
extraConfig = ''
browseable = yes
smb encrypt =…
Habe gerade malobeote3ak7w22dxjvns47hdcoxzkzfqcuax6vm7hqrrogqaqwvcid.onion generiert :)