pegasust
/
dotfiles
1
0
Fork 0
Code Issues 6 Pull Requests Projects Releases Wiki Activity

feat: sys-nix: change to udp port allowance

nix-components
pegasust 2022-11-23 21:25:13 -07:00
parent 9de22c1476 897660109d
commit fd480b029d
2 changed files with 17 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
system-nix/configuration.nix
View File

@ -91,9 +91,19 @@ with lib;
# inherit networking; # inherit networking;
networking = networking // { networking = networking // {
firewall = { firewall = {
trustedInterfaces = networking.firewall.trustedInterfaces or [] ++ [ "tailscale0" ]; trustedInterfaces = networking.firewall.trustedInterfaces or [ ] ++ [
allowedUDPPorts = networking.firewall.allowedUDPPorts or [] ++ [ config.services.tailscale.port ]; "tailscale0"
allowedTCPPorts = networking.firewall.allowedTCPPorts or [] ++ [ 22 ]; ];
allowedUDPPorts = networking.firewall.allowedUDPPorts or [ ] ++ [
config.services.tailscale.port
];
allowedTCPPorts = networking.firewall.allowedTCPPorts or [ ] ++ [
22
];
allowedUDPPortRanges = networking.firewall.allowedUDPPortRanges or [ ] ++ [
{ from = 60000; to = 61000; } # mosh
];
}; };
}; };

6
system-nix/flake.nix
View File

@ -17,6 +17,10 @@
specialArgs = { specialArgs = {
# includeHardware = false; # includeHardware = false;
hostname = "Felia"; hostname = "Felia";
services.openssh = {
permitRootLogin = "no";
enable = true;
};
}; };
}; };
# Generic machine # Generic machine
@ -83,8 +87,6 @@
prefixLength = 24; prefixLength = 24;
}]; }];
firewall.enable = true; firewall.enable = true;
firewall.allowedTCPPorts = [ 22 ];
firewall.allowedUDPPorts = lib.range 60000 61000; # mosh
useDHCP = false; useDHCP = false;
interfaces.eth0.useDHCP = true; interfaces.eth0.useDHCP = true;
}; };