30 lines
520 B
Nix
30 lines
520 B
Nix
{ config, ... }:
|
|
let
|
|
nixosModules = config.flake.modules.nixos;
|
|
in
|
|
{
|
|
flake.modules.nixos.nftables-firewall = {
|
|
networking.nftables.enable = true;
|
|
};
|
|
|
|
flake.modules.nixos.network-manager = {
|
|
networking = {
|
|
networkmanager.enable = true;
|
|
firewall.allowedTCPPorts = [
|
|
5173
|
|
5174
|
|
];
|
|
};
|
|
};
|
|
|
|
flake.modules.nixos.server-firewall =
|
|
{ ... }:
|
|
{
|
|
imports = [
|
|
nixosModules.nftables-firewall
|
|
];
|
|
|
|
networking.firewall.allowPing = false;
|
|
};
|
|
}
|