diff options
| author | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-05 01:29:41 +0100 |
|---|---|---|
| committer | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-05 21:23:19 +0100 |
| commit | 72a532244594a370f597babf700fb013123d8c17 (patch) | |
| tree | 0cdfcd4dea9cf3696c4f5c131c0e15283a328e43 /hosts/apocalypse/firewall.nix | |
| parent | 466adabc7229bda8119fa27820ceea659979b3f5 (diff) | |
Secrets via nixos-sops, caldav and fixed virt
Diffstat (limited to '')
| -rw-r--r-- | hosts/apocalypse/firewall.nix | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix index c63e556..26097af 100644 --- a/hosts/apocalypse/firewall.nix +++ b/hosts/apocalypse/firewall.nix @@ -33,8 +33,10 @@ let ]; in { + networking.nftables.enable = false; networking.firewall = { - enable = false; + enable = false; + checkReversePath = false; allowedTCPPorts = baseTCP; allowedUDPPorts = baseUDP; allowedUDPPortRanges = baseUDPRanges; @@ -47,6 +49,11 @@ in allowedTCPPortRanges = secureTCPRanges; }; }; + trustedInterfaces = [ + "docker0" + "br-*" + "veth*" + ]; }; } |