diff options
Diffstat (limited to '')
| -rw-r--r-- | hosts/apocalypse/default.nix | 8 | ||||
| -rw-r--r-- | hosts/apocalypse/firewall.nix | 9 | ||||
| -rw-r--r-- | hosts/test_vm/default.nix | 11 |
3 files changed, 16 insertions, 12 deletions
diff --git a/hosts/apocalypse/default.nix b/hosts/apocalypse/default.nix index d199263..c4bffbf 100644 --- a/hosts/apocalypse/default.nix +++ b/hosts/apocalypse/default.nix @@ -61,7 +61,6 @@ programs.nix-ld.enable = true; services.printing.enable = true; - # nix.config.allowUnfree = true; services.resolved = { @@ -96,13 +95,6 @@ PrintMotd = true; }; }; - - # Winbox setup. - programs.winbox = { - enable = true; - openFirewall = true; - package = pkgs.winbox; - }; } diff --git a/hosts/apocalypse/firewall.nix b/hosts/apocalypse/firewall.nix index c63e556..26097af 100644 --- a/hosts/apocalypse/firewall.nix +++ b/hosts/apocalypse/firewall.nix @@ -33,8 +33,10 @@ let ]; in { + networking.nftables.enable = false; networking.firewall = { - enable = false; + enable = false; + checkReversePath = false; allowedTCPPorts = baseTCP; allowedUDPPorts = baseUDP; allowedUDPPortRanges = baseUDPRanges; @@ -47,6 +49,11 @@ in allowedTCPPortRanges = secureTCPRanges; }; }; + trustedInterfaces = [ + "docker0" + "br-*" + "veth*" + ]; }; } diff --git a/hosts/test_vm/default.nix b/hosts/test_vm/default.nix index 280cb9a..06998c6 100644 --- a/hosts/test_vm/default.nix +++ b/hosts/test_vm/default.nix @@ -1,9 +1,14 @@ -{pkgs, lib, ...}: { - +{pkgs, lib, inputs,...}: { boot.loader.systemd-boot.enable = true; boot.loader.efi.canTouchEfiVariables = true; + imports = ["${inputs.nixpkgs}/nixos/modules/virtualisation/libvirtd.nix"]; - addons.desktop.hyprland.enable = true; + networking.hostName = "cookie_vm"; # Define your hostname. + networking.networkmanager.enable = true; + programs.nix-ld.enable = true; + + + addons.desktop.hyprland.enable = false; addons.desktop.xfce.enable = true; addons.virtualisation.guest = true; virtualisation.vmVariant = { |
