aboutsummaryrefslogtreecommitdiff
path: root/modules/common/networking.nix
diff options
context:
space:
mode:
authorMax Audron <audron@cocaine.farm>2025-07-30 16:53:40 +0200
committerMax Audron <audron@cocaine.farm>2025-07-30 16:53:40 +0200
commit80abf0577c962e8d5a71e586f020953f939d90c6 (patch)
treedac85c2a5d5d99cbb2fb61824924ddbe8a113042 /modules/common/networking.nix
parentadd initial prometheus deployment (diff)
enable firewalls
Diffstat (limited to 'modules/common/networking.nix')
-rw-r--r--modules/common/networking.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/modules/common/networking.nix b/modules/common/networking.nix
index 63c0d89..0a7b3f7 100644
--- a/modules/common/networking.nix
+++ b/modules/common/networking.nix
@@ -11,6 +11,13 @@
dhcpcd.extraConfig = ''
nohook resolv.conf
'';
+
+ firewall = {
+ enable = true;
+ trustedInterfaces = ["wg0"];
+ allowedTCPPorts = [ 80 443 ];
+ };
+ nftables.enable = true;
};
systemd.services = {