mirror of
https://github.com/foo-dogsquared/nixos-config.git
synced 2025-02-07 12:19:07 +00:00
hosts/plover: update firewall and networking setup
This commit is contained in:
parent
96ca9d3685
commit
6e3dd18633
@ -10,12 +10,12 @@ in
|
|||||||
config = lib.mkIf cfg.enable {
|
config = lib.mkIf cfg.enable {
|
||||||
networking = {
|
networking = {
|
||||||
nftables.enable = true;
|
nftables.enable = true;
|
||||||
domain = "foodogsquared.one";
|
|
||||||
firewall = {
|
firewall = {
|
||||||
enable = true;
|
enable = true;
|
||||||
allowedTCPPorts = [
|
|
||||||
22 # Secure Shells.
|
# Secure Shells
|
||||||
];
|
allowedTCPPorts = [ 22 ];
|
||||||
|
allowedUDPPorts = [ 22 ];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
@ -77,10 +77,8 @@ in
|
|||||||
domains = [ config.networking.domain ];
|
domains = [ config.networking.domain ];
|
||||||
|
|
||||||
routes = lib.singleton {
|
routes = lib.singleton {
|
||||||
routeConfig = {
|
Gateway = wan.ipv4Gateway;
|
||||||
Gateway = wan.ipv4Gateway;
|
GatewayOnLink = true;
|
||||||
GatewayOnLink = true;
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
|
|
||||||
linkConfig.RequiredForOnline = "routable";
|
linkConfig.RequiredForOnline = "routable";
|
||||||
|
Loading…
Reference in New Issue
Block a user