pegasust
/
dotfiles
1
0
Fork 0
Code Issues 6 Pull Requests Projects Releases Wiki Activity

sys-nix: enable firewall on lizzi and explicitly open 80 and 443 TCP port

nix-components
pegasust 2022-11-25 20:09:01 -07:00
parent 166a8d03e6
commit 3cc43147d8
1 changed files with 17 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
system-nix/flake.nix
View File

@ -36,7 +36,22 @@
address = "71.0.0.1";
prefixLength = 24;
}];
firewall.enable = false;
firewall.enable = true;
firewall = {
enable = true;
# Also wishing for nix-lsp to be a bit better here
# A man can only pray and cry
# How would we add such functionality to nix-lsp if nix is
# inherently lazy?
#
# Can use the schema, maybe?
#
# Also wishing on the ability for services to declare their
# own ports now
#
# Maybe write a mkService?
allowedTCPPorts = [80 443];
};
useDHCP = false;
interfaces.eth0.useDHCP = true;
};
@ -59,7 +74,7 @@
};
services.nginx = {
enable = true;
clientMaxBodySize = "100m";
clientMaxBodySize = "100m"; # Allow big file transfers over git :^)
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;