summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorJakub Stachurski <j.stachurski@student.utwente.nl>2025-11-19 21:02:12 +0100
committerJakub Stachurski <j.stachurski@student.utwente.nl>2025-11-19 21:02:12 +0100
commitf5b37610b3835ea26757ef36d554ec598d53100c (patch)
treea357794517e4d05e170b67c8d755199b6f272723 /hosts
parentc8ca96bf705cd359642168cfbe1c6acc547e491a (diff)
Add fix firewall and add tatuin
Diffstat (limited to 'hosts')
-rw-r--r--hosts/apocalypse/firewall.nix46
1 files changed, 24 insertions, 22 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index 8cf3e61..4be34a3 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -33,27 +33,29 @@ let
];
in
{
- networking.nftables.enable = true;
- networking.firewall = {
- enable = true;
- checkReversePath = false;
- allowedTCPPorts = baseTCP;
- allowedUDPPorts = baseUDP;
- allowedUDPPortRanges = baseUDPRanges;
- allowedTCPPortRanges = baseTCPRanges;
- interfaces = {
- "nix-laptop" = {
- allowedTCPPorts = secureTCP;
- allowedUDPPorts = secureUDP;
- allowedUDPPortRanges = secureUDPRanges;
- allowedTCPPortRanges = secureTCPRanges;
- };
- };
- trustedInterfaces = [
- "docker0"
- "br-*"
- "veth*"
- ];
+ networking.nftables.enable = true;
+ networking.firewall = {
+ enable = true;
+ checkReversePath = false;
+ allowedTCPPorts = baseTCP;
+ allowedUDPPorts = baseUDP;
+ allowedUDPPortRanges = baseUDPRanges;
+ allowedTCPPortRanges = baseTCPRanges;
+ interfaces = {
+ "nix-laptop" = {
+ allowedTCPPorts = secureTCP;
+ allowedUDPPorts = secureUDP;
+ allowedUDPPortRanges = secureUDPRanges;
+ allowedTCPPortRanges = secureTCPRanges;
+ };
};
-}
+ trustedInterfaces = [
+ "docker0"
+ "br-*"
+ "veth*"
+ "vnet*"
+ "virbr*"
+ ];
+ };
+}