diff options
| author | Mark Nipper <nipsy@bitgnome.net> | 2026-07-27 09:30:18 -0700 |
|---|---|---|
| committer | Mark Nipper <nipsy@bitgnome.net> | 2026-07-27 09:30:18 -0700 |
| commit | 86b4d33da88cc5cf595a0ec44081d9a5ab852813 (patch) | |
| tree | cb17b8cf2a1ca5432b054278d21c411953cc8742 | |
| parent | a2397d16d41c6b26a11dd14626690b78ca80d105 (diff) | |
| download | nix-86b4d33da88cc5cf595a0ec44081d9a5ab852813.tar nix-86b4d33da88cc5cf595a0ec44081d9a5ab852813.tar.gz nix-86b4d33da88cc5cf595a0ec44081d9a5ab852813.tar.bz2 nix-86b4d33da88cc5cf595a0ec44081d9a5ab852813.tar.lz nix-86b4d33da88cc5cf595a0ec44081d9a5ab852813.tar.xz nix-86b4d33da88cc5cf595a0ec44081d9a5ab852813.tar.zst nix-86b4d33da88cc5cf595a0ec44081d9a5ab852813.zip | |
Clean up firewall rules
| -rw-r--r-- | hosts/arrakis/default.nix | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix index bd79c71..b37e643 100644 --- a/hosts/arrakis/default.nix +++ b/hosts/arrakis/default.nix @@ -358,7 +358,7 @@ ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { http, https } counter accept # 80, 443' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport { netbios-ns, netbios-dgm } counter accept # 137, 138' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { netbios-ssn, microsoft-ds } counter accept # 139, 445' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport 2049 counter accept' + ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport nfs counter accept # 2049' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport { 2456, 2457 } counter accept # Valheim dedicated server' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 5121 counter accept # Neverwinter Nights dedicated server' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 7777 counter accept # Satisfactory dedicated server' @@ -368,8 +368,6 @@ ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 8211 counter accept # Palworld dedicated server' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 9876-9878 counter accept # V Rising dedicated server' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 15637 counter accept # Enshrouded' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" ip saddr 192.168.1.0/24 udp dport { 27031, 27036 } counter accept # Steam Remote Play' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" ip saddr 192.168.1.0/24 tcp dport { 27036, 27037 } counter accept # Steam Remote Play' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 51820 counter accept # WireGuard' ${pkgs.nftables}/bin/nft -f ${config.sops.secrets."nftables/ssh".path} ''; in { |