diff options
Diffstat (limited to 'hosts/apocalypse/firewall.nix')
| -rw-r--r-- | hosts/apocalypse/firewall.nix | 43 |
1 files changed, 26 insertions, 17 deletions
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix index 4be34a3..8c5dadb 100644 --- a/hosts/apocalypse/firewall.nix +++ b/hosts/apocalypse/firewall.nix @@ -1,37 +1,46 @@ -{pkgs, config, ...}: -let +{ pkgs, config, ... }: +let baseTCP = [ 22000 # Syncthng - 5352 # Zeroconf for spotifyd - ]; + 5352 # Zeroconf for spotifyd + ]; baseUDP = [ 22000 # Syncthing - 22027 # Syncthing + 22027 # Syncthing 16555 # Wireguard - 5353 # Mdns (Spotify) - ]; + 5353 # Mdns (Spotify) + ]; baseTCPRanges = [ - { from = 1714; to = 1764; } # KDE-CONNECT + { + from = 1714; + to = 1764; + } # KDE-CONNECT ]; baseUDPRanges = [ - { from = 1714; to = 1764; } # KDE-CONNECT + { + from = 1714; + to = 1764; + } # KDE-CONNECT ]; secureTCP = [ - 22 80 433 5900 # SSH HTTP VNC - ]; - + 22 + 80 + 433 + 5900 # SSH HTTP VNC + ]; + secureUDP = [ - 5900 - ]; + 5900 + ]; secureTCPRanges = [ - ]; + ]; secureUDPRanges = [ - ]; -in + ]; +in { networking.nftables.enable = true; networking.firewall = { |
