summaryrefslogtreecommitdiff
path: root/hosts/apocalypse/firewall.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/apocalypse/firewall.nix')
-rw-r--r--hosts/apocalypse/firewall.nix43
1 files changed, 26 insertions, 17 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index 4be34a3..8c5dadb 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -1,37 +1,46 @@
-{pkgs, config, ...}:
-let
+{ pkgs, config, ... }:
+let
baseTCP = [
22000 # Syncthng
- 5352 # Zeroconf for spotifyd
- ];
+ 5352 # Zeroconf for spotifyd
+ ];
baseUDP = [
22000 # Syncthing
- 22027 # Syncthing
+ 22027 # Syncthing
16555 # Wireguard
- 5353 # Mdns (Spotify)
- ];
+ 5353 # Mdns (Spotify)
+ ];
baseTCPRanges = [
- { from = 1714; to = 1764; } # KDE-CONNECT
+ {
+ from = 1714;
+ to = 1764;
+ } # KDE-CONNECT
];
baseUDPRanges = [
- { from = 1714; to = 1764; } # KDE-CONNECT
+ {
+ from = 1714;
+ to = 1764;
+ } # KDE-CONNECT
];
secureTCP = [
- 22 80 433 5900 # SSH HTTP VNC
- ];
-
+ 22
+ 80
+ 433
+ 5900 # SSH HTTP VNC
+ ];
+
secureUDP = [
- 5900
- ];
+ 5900
+ ];
secureTCPRanges = [
- ];
+ ];
secureUDPRanges = [
- ];
-in
+ ];
+in
{
networking.nftables.enable = true;
networking.firewall = {