Enable firewall

This commit is contained in:
Ivan R. 2023-08-19 13:36:18 +05:00
parent 082fe90ce9
commit 3d0697a16b
No known key found for this signature in database
GPG key ID: 56C7BAAE859B302C

View file

@ -8,13 +8,11 @@
nameservers = [ "1.1.1.1" ];
firewall = {
# TODO: enable me
enable = false;
allowedTCPPorts = [ 22 80 443 1900 7359 30000 30025 30465 30993 ];
allowedUDPPorts = [ 30000 1900 7359 ];
# Kubernetes
trustedInterfaces = [ "lo" "flannel.1" "cni0" ];
enable = true;
# SSH, nginx
allowedTCPPorts = [ 22 80 443 ];
# Jellyfin
allowedUDPPorts = [ 1900 7359 ];
};
wireless.enable = false;