diff options
| author | Mark Nipper <nipsy@bitgnome.net> | 2026-07-27 10:54:05 -0700 |
|---|---|---|
| committer | Mark Nipper <nipsy@bitgnome.net> | 2026-07-27 10:54:05 -0700 |
| commit | 95557ce2359bafdf404edf81840dc85b3c45dc8b (patch) | |
| tree | 6849e8bd4c5db54b6265d30a6c48fd758bea44c7 /hosts | |
| parent | 86b4d33da88cc5cf595a0ec44081d9a5ab852813 (diff) | |
| download | nix-95557ce2359bafdf404edf81840dc85b3c45dc8b.tar nix-95557ce2359bafdf404edf81840dc85b3c45dc8b.tar.gz nix-95557ce2359bafdf404edf81840dc85b3c45dc8b.tar.bz2 nix-95557ce2359bafdf404edf81840dc85b3c45dc8b.tar.lz nix-95557ce2359bafdf404edf81840dc85b3c45dc8b.tar.xz nix-95557ce2359bafdf404edf81840dc85b3c45dc8b.tar.zst nix-95557ce2359bafdf404edf81840dc85b3c45dc8b.zip | |
Reswizzle game firewall rules
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/arrakis/default.nix | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix index b37e643..f167350 100644 --- a/hosts/arrakis/default.nix +++ b/hosts/arrakis/default.nix @@ -355,19 +355,22 @@ }; "nftables-extra" = let rules_script = '' + ${pkgs.nftables}/bin/nft create chain inet nixos-fw games || ${pkgs.nftables}/bin/nft flush chain inet nixos-fw games + ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 192.168.1.0/24 counter accept' + ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'counter drop' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { http, https } counter accept # 80, 443' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport { netbios-ns, netbios-dgm } counter accept # 137, 138' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { netbios-ssn, microsoft-ds } counter accept # 139, 445' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport nfs counter accept # 2049' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport { 2456, 2457 } counter accept # Valheim dedicated server' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 5121 counter accept # Neverwinter Nights dedicated server' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 7777 counter accept # Satisfactory dedicated server' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { 7777, 8888 } counter accept # Satisfactory dedicated server' + ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport { 2456, 2457 } jump games # Valheim dedicated server' + ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 5121 jump games # Neverwinter Nights dedicated server' + ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 7777 jump games # Satisfactory dedicated server' + ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { 7777, 8888 } jump games # Satisfactory dedicated server' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "veth.host" tcp dport { 7878, 8080, 8686, 8787, 8989 } counter accept # Radarr, Sabnzb, Lidarr, Sonarr, Readarr' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { 7878, 8080, 8686, 8787, 8989 } counter accept # Radarr, Sabnzb, Lidarr, Sonarr, Readarr' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 8211 counter accept # Palworld dedicated server' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 9876-9878 counter accept # V Rising dedicated server' - ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 15637 counter accept # Enshrouded' + ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 8211 jump games # Palworld dedicated server' + ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 9876-9878 jump games # V Rising dedicated server' + ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 15637 jump games # Enshrouded' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport 51820 counter accept # WireGuard' ${pkgs.nftables}/bin/nft -f ${config.sops.secrets."nftables/ssh".path} ''; in { |