mirror of
https://github.com/Nickiel12/nicks-nix-config.git
synced 2024-11-26 14:45:29 -08:00
18 lines
436 B
Nix
18 lines
436 B
Nix
{ config, pkgs, ...}:
|
|
|
|
let
|
|
in
|
|
{
|
|
networking.firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [80 443 5432];
|
|
|
|
extraCommands = with pkgs.lib; ''
|
|
# ${pkgs.nftables}/bin/nft -f - <<EOF
|
|
|
|
# EOF
|
|
# Already handled by tailscale in ts-input
|
|
# ${pkgs.nftables}/bin/nft insert rule filter nixos-fw ip saddr 100.64.0.0-100.64.255.255 iifname "enp2s0" counter jump nixos-fw-log-refuse
|
|
'';
|
|
};
|
|
}
|