diff options
| author | Mark Nipper <nipsy@bitgnome.net> | 2026-07-27 12:58:43 -0700 |
|---|---|---|
| committer | Mark Nipper <nipsy@bitgnome.net> | 2026-07-27 12:58:43 -0700 |
| commit | 3d103e6a742a6ac57a18d0d0008abd979d7c0354 (patch) | |
| tree | bb428ca5f521d3f44f3c707b1718beb2d6a6dfc0 /hosts/arrakis/default.nix | |
| parent | 36161316b90781fd0aabcaadd2432d92f5380105 (diff) | |
| download | nix-3d103e6a742a6ac57a18d0d0008abd979d7c0354.tar nix-3d103e6a742a6ac57a18d0d0008abd979d7c0354.tar.gz nix-3d103e6a742a6ac57a18d0d0008abd979d7c0354.tar.bz2 nix-3d103e6a742a6ac57a18d0d0008abd979d7c0354.tar.lz nix-3d103e6a742a6ac57a18d0d0008abd979d7c0354.tar.xz nix-3d103e6a742a6ac57a18d0d0008abd979d7c0354.tar.zst nix-3d103e6a742a6ac57a18d0d0008abd979d7c0354.zip | |
Diffstat (limited to 'hosts/arrakis/default.nix')
| -rw-r--r-- | hosts/arrakis/default.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix index f167350..de796fe 100644 --- a/hosts/arrakis/default.nix +++ b/hosts/arrakis/default.nix @@ -357,6 +357,7 @@ "nftables-extra" = let rules_script = '' ${pkgs.nftables}/bin/nft create chain inet nixos-fw games || ${pkgs.nftables}/bin/nft flush chain inet nixos-fw games ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 192.168.1.0/24 counter accept' + ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.251.128.0/17, 70.252.0.0/14 } counter accept # Trent' ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'counter drop' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { http, https } counter accept # 80, 443' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport { netbios-ns, netbios-dgm } counter accept # 137, 138' |