diff options
Diffstat (limited to 'hosts/apocalypse/firewall.nix')
| -rw-r--r-- | hosts/apocalypse/firewall.nix | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix index c63e556..26097af 100644 --- a/hosts/apocalypse/firewall.nix +++ b/hosts/apocalypse/firewall.nix @@ -33,8 +33,10 @@ let ]; in { + networking.nftables.enable = false; networking.firewall = { - enable = false; + enable = false; + checkReversePath = false; allowedTCPPorts = baseTCP; allowedUDPPorts = baseUDP; allowedUDPPortRanges = baseUDPRanges; @@ -47,6 +49,11 @@ in allowedTCPPortRanges = secureTCPRanges; }; }; + trustedInterfaces = [ + "docker0" + "br-*" + "veth*" + ]; }; } |
