From 639a4cfe50d6f0792f95f47183248824a90b3bd6 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Thu, 31 Aug 2023 06:44:04 +0000
Subject: [PATCH] ftp: grant read access to LAN

---
 hosts/by-name/servo/services/ftp/default.nix | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/hosts/by-name/servo/services/ftp/default.nix b/hosts/by-name/servo/services/ftp/default.nix
index c7d83a7e..79ce6f09 100644
--- a/hosts/by-name/servo/services/ftp/default.nix
+++ b/hosts/by-name/servo/services/ftp/default.nix
@@ -41,11 +41,20 @@ in
     enable = true;
     settings = {
       ftpd = {
-        bindings = [{
-          address = "10.0.10.5";
-          port = 21;
-          debug = true;
-        }];
+        bindings = [
+          {
+            # binding this means any wireguard client can connect
+            address = "10.0.10.5";
+            port = 21;
+            debug = true;
+          }
+          {
+            # binding this means any LAN client can connect
+            address = "10.78.79.51";
+            port = 21;
+            debug = true;
+          }
+        ];
 
         # active mode is susceptible to "bounce attacks", without much benefit over passive mode
         disable_active_mode = true;