pegasust
/
dotfiles
1
0
Fork 0
Code Issues 6 Pull Requests Projects Releases Wiki Activity

feat: sys-nix: change to udp port allowance

nix-components
pegasust 2022-11-23 21:25:13 -07:00
parent 9de22c1476 897660109d
commit fd480b029d
2 changed files with 17 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
system-nix/configuration.nix
View File

@ -91,9 +91,19 @@ with lib;
# inherit networking;
networking = networking // {
firewall = {
trustedInterfaces = networking.firewall.trustedInterfaces or [] ++ [ "tailscale0" ];
allowedUDPPorts = networking.firewall.allowedUDPPorts or [] ++ [ config.services.tailscale.port ];
allowedTCPPorts = networking.firewall.allowedTCPPorts or [] ++ [ 22 ];
trustedInterfaces = networking.firewall.trustedInterfaces or [ ] ++ [
"tailscale0"
];
allowedUDPPorts = networking.firewall.allowedUDPPorts or [ ] ++ [
config.services.tailscale.port
];
allowedTCPPorts = networking.firewall.allowedTCPPorts or [ ] ++ [
22
];
allowedUDPPortRanges = networking.firewall.allowedUDPPortRanges or [ ] ++ [
{ from = 60000; to = 61000; } # mosh
];
};
};

6
system-nix/flake.nix
View File

@ -17,6 +17,10 @@
specialArgs = {
# includeHardware = false;
hostname = "Felia";
services.openssh = {
permitRootLogin = "no";
enable = true;
};
};
};
# Generic machine
@ -83,8 +87,6 @@
prefixLength = 24;
}];
firewall.enable = true;
firewall.allowedTCPPorts = [ 22 ];
firewall.allowedUDPPorts = lib.range 60000 61000; # mosh
useDHCP = false;
interfaces.eth0.useDHCP = true;
};