hosts/plover: update firewall and networking setup

This commit is contained in:
Gabriel Arazas 2024-10-02 10:43:05 +08:00
parent 96ca9d3685
commit 6e3dd18633
No known key found for this signature in database
GPG Key ID: 62104B43D00AA360
2 changed files with 6 additions and 8 deletions

View File

@ -10,12 +10,12 @@ in
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
networking = { networking = {
nftables.enable = true; nftables.enable = true;
domain = "foodogsquared.one";
firewall = { firewall = {
enable = true; enable = true;
allowedTCPPorts = [
22 # Secure Shells. # Secure Shells
]; allowedTCPPorts = [ 22 ];
allowedUDPPorts = [ 22 ];
}; };
}; };
}; };

View File

@ -77,10 +77,8 @@ in
domains = [ config.networking.domain ]; domains = [ config.networking.domain ];
routes = lib.singleton { routes = lib.singleton {
routeConfig = { Gateway = wan.ipv4Gateway;
Gateway = wan.ipv4Gateway; GatewayOnLink = true;
GatewayOnLink = true;
};
}; };
linkConfig.RequiredForOnline = "routable"; linkConfig.RequiredForOnline = "routable";