diff options
| author | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-19 21:02:52 +0100 |
|---|---|---|
| committer | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-19 21:02:52 +0100 |
| commit | 892de67a9f64d0b0cdb023d830a019d8feec0a57 (patch) | |
| tree | 0c5fd0c60ef93bb5cdc5f83c8cade0c5dddb4899 /hosts/apocalypse/firewall.nix | |
| parent | f5b37610b3835ea26757ef36d554ec598d53100c (diff) | |
Nix fmt
Diffstat (limited to '')
| -rw-r--r-- | hosts/apocalypse/firewall.nix | 43 |
1 files changed, 26 insertions, 17 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix index 4be34a3..8c5dadb 100644 --- a/hosts/apocalypse/firewall.nix +++ b/hosts/apocalypse/firewall.nix @@ -1,37 +1,46 @@ -{pkgs, config, ...}: -let +{ pkgs, config, ... }: +let baseTCP = [ 22000 # Syncthng - 5352 # Zeroconf for spotifyd - ]; + 5352 # Zeroconf for spotifyd + ]; baseUDP = [ 22000 # Syncthing - 22027 # Syncthing + 22027 # Syncthing 16555 # Wireguard - 5353 # Mdns (Spotify) - ]; + 5353 # Mdns (Spotify) + ]; baseTCPRanges = [ - { from = 1714; to = 1764; } # KDE-CONNECT + { + from = 1714; + to = 1764; + } # KDE-CONNECT ]; baseUDPRanges = [ - { from = 1714; to = 1764; } # KDE-CONNECT + { + from = 1714; + to = 1764; + } # KDE-CONNECT ]; secureTCP = [ - 22 80 433 5900 # SSH HTTP VNC - ]; - + 22 + 80 + 433 + 5900 # SSH HTTP VNC + ]; + secureUDP = [ - 5900 - ]; + 5900 + ]; secureTCPRanges = [ - ]; + ]; secureUDPRanges = [ - ]; -in + ]; +in { networking.nftables.enable = true; networking.firewall = { |