aboutsummaryrefslogtreecommitdiffstats
path: root/hosts/arrakis/default.nix
diff options
context:
space:
mode:
authorMark Nipper <nipsy@bitgnome.net>2026-09-22 16:17:35 -0700
committerMark Nipper <nipsy@bitgnome.net>2026-09-22 16:17:35 -0700
commitb149342aa51c77d1981ebb7cdfaac036c2fe0737 (patch)
treebbc50f72f76d547e23e80aa367c61a56a756a039 /hosts/arrakis/default.nix
parent7cb5f80919e826c1e676f29f8f8542be6f272cf6 (diff)
downloadnix-b149342aa51c77d1981ebb7cdfaac036c2fe0737.tar
nix-b149342aa51c77d1981ebb7cdfaac036c2fe0737.tar.gz
nix-b149342aa51c77d1981ebb7cdfaac036c2fe0737.tar.bz2
nix-b149342aa51c77d1981ebb7cdfaac036c2fe0737.tar.lz
nix-b149342aa51c77d1981ebb7cdfaac036c2fe0737.tar.xz
nix-b149342aa51c77d1981ebb7cdfaac036c2fe0737.tar.zst
nix-b149342aa51c77d1981ebb7cdfaac036c2fe0737.zip
Add firewall exceptionsHEADmaster
Diffstat (limited to 'hosts/arrakis/default.nix')
-rw-r--r--hosts/arrakis/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix
index a95e899..3c83e4b 100644
--- a/hosts/arrakis/default.nix
+++ b/hosts/arrakis/default.nix
@@ -345,6 +345,7 @@
"nftables-extra" = let rules_script = ''
${pkgs.nftables}/bin/nft create chain inet nixos-fw games || ${pkgs.nftables}/bin/nft flush chain inet nixos-fw games
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 192.168.1.0/24 counter accept'
+ ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 47.136.0.0-47.181.255.255 } counter accept # Andrew'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.109.192.0/18, 70.110.0.0/15 } counter accept # Kyle'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.251.128.0/17, 70.252.0.0/14 } counter accept # Trent'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 99.10.64.0/18, 99.11.0.0/16, 99.12.0.0/14, 99.75.128.0/18, 99.16.0.0/12, 99.72.0.0/15, 99.64.0.0/13, 99.75.0.0/17, 99.74.0.0/16, 99.10.128.0/17, 99.32.0.0/11 } counter accept # Jimmy'