firewall

2023-12-02 17:37:24 +01:00
parent 4755b2a5e3
commit 1fd0d104f6
3 changed files with 3 additions and 2 deletions
--- a/modules/firewall.nix
+++ b/modules/firewall.nix
@@ -3,5 +3,6 @@ let
  allowedUDPPortRanges = vars.udpRanges;
 in
 {
+  networking.firewall.enable = true;
  networking.firewall.allowedUDPPortRanges = allowedUDPPortRanges;
 }
--- a/modules/graphical/shared.nix
+++ b/modules/graphical/shared.nix
@@ -25,7 +25,7 @@ in
  ];

  networking.firewall = {
-    enable = false;
+    enable = true;
    allowedTCPPortRanges = [
      { from = 1714; to = 1764; } # KDE Connect
    ];
--- a/systems/pc/configuration.nix
+++ b/systems/pc/configuration.nix
@@ -22,7 +22,7 @@
  systemd.network.wait-online.enable = false;
  
  #disable firewall when doing ipv6 vm stuff
-  #networking.firewall.enable = lib.mkForce false;
+  networking.firewall.enable = lib.mkForce false;

  # Set your time zone.
  time.timeZone = "Europe/Vienna";