summaryrefslogtreecommitdiff
path: root/hosts/apocalypse
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--hosts/apocalypse/default.nix8
-rw-r--r--hosts/apocalypse/firewall.nix9
2 files changed, 8 insertions, 9 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix
index d199263..c4bffbf 100644
--- a/hosts/apocalypse/default.nix
+++ b/hosts/apocalypse/default.nix
@@ -61,7 +61,6 @@
programs.nix-ld.enable = true;
services.printing.enable = true;
- # nix.config.allowUnfree = true;
services.resolved = {
@@ -96,13 +95,6 @@
PrintMotd = true;
};
};
-
- # Winbox setup.
- programs.winbox = {
- enable = true;
- openFirewall = true;
- package = pkgs.winbox;
- };
}
diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix
index c63e556..26097af 100644
--- a/hosts/apocalypse/firewall.nix
+++ b/hosts/apocalypse/firewall.nix
@@ -33,8 +33,10 @@ let
];
in
{
+ networking.nftables.enable = false;
networking.firewall = {
- enable = false;
+ enable = false;
+ checkReversePath = false;
allowedTCPPorts = baseTCP;
allowedUDPPorts = baseUDP;
allowedUDPPortRanges = baseUDPRanges;
@@ -47,6 +49,11 @@ in
allowedTCPPortRanges = secureTCPRanges;
};
};
+ trustedInterfaces = [
+ "docker0"
+ "br-*"
+ "veth*"
+ ];
};
}