diff options
| author | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-19 21:02:12 +0100 |
|---|---|---|
| committer | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2025-11-19 21:02:12 +0100 |
| commit | f5b37610b3835ea26757ef36d554ec598d53100c (patch) | |
| tree | a357794517e4d05e170b67c8d755199b6f272723 /hosts | |
| parent | c8ca96bf705cd359642168cfbe1c6acc547e491a (diff) | |
Add fix firewall and add tatuin
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/apocalypse/firewall.nix | 46 |
1 files changed, 24 insertions, 22 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix index 8cf3e61..4be34a3 100644 --- a/hosts/apocalypse/firewall.nix +++ b/hosts/apocalypse/firewall.nix @@ -33,27 +33,29 @@ let ]; in { - networking.nftables.enable = true; - networking.firewall = { - enable = true; - checkReversePath = false; - allowedTCPPorts = baseTCP; - allowedUDPPorts = baseUDP; - allowedUDPPortRanges = baseUDPRanges; - allowedTCPPortRanges = baseTCPRanges; - interfaces = { - "nix-laptop" = { - allowedTCPPorts = secureTCP; - allowedUDPPorts = secureUDP; - allowedUDPPortRanges = secureUDPRanges; - allowedTCPPortRanges = secureTCPRanges; - }; - }; - trustedInterfaces = [ - "docker0" - "br-*" - "veth*" - ]; + networking.nftables.enable = true; + networking.firewall = { + enable = true; + checkReversePath = false; + allowedTCPPorts = baseTCP; + allowedUDPPorts = baseUDP; + allowedUDPPortRanges = baseUDPRanges; + allowedTCPPortRanges = baseTCPRanges; + interfaces = { + "nix-laptop" = { + allowedTCPPorts = secureTCP; + allowedUDPPorts = secureUDP; + allowedUDPPortRanges = secureUDPRanges; + allowedTCPPortRanges = secureTCPRanges; + }; }; -} + trustedInterfaces = [ + "docker0" + "br-*" + "veth*" + "vnet*" + "virbr*" + ]; + }; +} |
