summaryrefslogtreecommitdiff
path: root/hosts/apocalypse/firewall.nix
diff options
context:
space:
mode:
authorJakub Stachurski <j.stachurski@student.utwente.nl>2026-02-11 15:33:46 +0100
committerGitHub <noreply@github.com>2026-02-11 15:33:46 +0100
commitf4272650dba86e04863b994bc85165855ac0eb58 (patch)
treea6855656f35bc4c351e215827b58a83b4f2a99ec /hosts/apocalypse/firewall.nix
parentbb87f9ebadc3bb5c5158d9fbad9a5acef8c8f692 (diff)
parent2f65e7f40e97f6ccb3d164169698033ce1692a76 (diff)
Merge branch 'main' into host/omega-relayhost/omega-relay
Diffstat (limited to 'hosts/apocalypse/firewall.nix')
-rw-r--r--hosts/apocalypse/firewall.nix3
1 files changed, 2 insertions, 1 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index 05feacf..f6220c5 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -42,9 +42,10 @@ let
];
in
{
+ environment.etc.hosts.mode = "0700";
networking.nftables.enable = true;
networking.firewall = {
- enable = true;
+ enable = false;
checkReversePath = false;
allowedTCPPorts = baseTCP;
allowedUDPPorts = baseUDP;