summaryrefslogtreecommitdiff
path: root/hosts/apocalypse/firewall.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/apocalypse/firewall.nix')
-rw-r--r--hosts/apocalypse/firewall.nix9
1 files changed, 8 insertions, 1 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index c63e556..26097af 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -33,8 +33,10 @@ let
];
in
{
+ networking.nftables.enable = false;
networking.firewall = {
- enable = false;
+ enable = false;
+ checkReversePath = false;
allowedTCPPorts = baseTCP;
allowedUDPPorts = baseUDP;
allowedUDPPortRanges = baseUDPRanges;
@@ -47,6 +49,11 @@ in
allowedTCPPortRanges = secureTCPRanges;
};
};
+ trustedInterfaces = [
+ "docker0"
+ "br-*"
+ "veth*"
+ ];
};
}