aboutsummaryrefslogtreecommitdiffstats
path: root/hosts
diff options
context:
space:
mode:
authorMark Nipper <nipsy@bitgnome.net>2026-09-13 15:42:50 -0700
committerMark Nipper <nipsy@bitgnome.net>2026-09-13 15:42:50 -0700
commita95931f48d45f23413c85bfbbd6dbdc6f127114e (patch)
treef9d2d46c8b452132337ee03923ed0179c32367cd /hosts
parent8ec2a5086aaf819561308bf09b1fe6cc91f000eb (diff)
downloadnix-a95931f48d45f23413c85bfbbd6dbdc6f127114e.tar
nix-a95931f48d45f23413c85bfbbd6dbdc6f127114e.tar.gz
nix-a95931f48d45f23413c85bfbbd6dbdc6f127114e.tar.bz2
nix-a95931f48d45f23413c85bfbbd6dbdc6f127114e.tar.lz
nix-a95931f48d45f23413c85bfbbd6dbdc6f127114e.tar.xz
nix-a95931f48d45f23413c85bfbbd6dbdc6f127114e.tar.zst
nix-a95931f48d45f23413c85bfbbd6dbdc6f127114e.zip
Add firewall exceptionsHEADmaster
Diffstat (limited to '')
-rw-r--r--hosts/arrakis/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix
index 79a6bf2..a95e899 100644
--- a/hosts/arrakis/default.nix
+++ b/hosts/arrakis/default.nix
@@ -345,6 +345,7 @@
"nftables-extra" = let rules_script = ''
${pkgs.nftables}/bin/nft create chain inet nixos-fw games || ${pkgs.nftables}/bin/nft flush chain inet nixos-fw games
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 192.168.1.0/24 counter accept'
+ ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.109.192.0/18, 70.110.0.0/15 } counter accept # Kyle'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.251.128.0/17, 70.252.0.0/14 } counter accept # Trent'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 99.10.64.0/18, 99.11.0.0/16, 99.12.0.0/14, 99.75.128.0/18, 99.16.0.0/12, 99.72.0.0/15, 99.64.0.0/13, 99.75.0.0/17, 99.74.0.0/16, 99.10.128.0/17, 99.32.0.0/11 } counter accept # Jimmy'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 108.192.0.0/10 counter accept # Court'