From d87c0cc9d83d83c3babdf3450ab1be790244e49a Mon Sep 17 00:00:00 2001
From: Mark Nipper <nipsy@bitgnome.net>
Date: Wed, 19 Jun 2024 16:09:30 -0700
Subject: Adjust firewall rules

---
 hosts/common/optional/services/asterisk.nix | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

(limited to 'hosts/common/optional/services')

diff --git a/hosts/common/optional/services/asterisk.nix b/hosts/common/optional/services/asterisk.nix
index d638a3c..5032cf5 100644
--- a/hosts/common/optional/services/asterisk.nix
+++ b/hosts/common/optional/services/asterisk.nix
@@ -1,8 +1,14 @@
 { config, lib, pkgs, ... }:
 {
-  networking.firewall.interfaces.enp116s0.allowedUDPPorts = [
-    5060 # sip
-  ];
+  networking.firewall = {
+    allowedUDPPortRanges = [{
+      from = 6970;
+      to = 6999;
+    }];
+    interfaces.enp116s0.allowedUDPPorts = [
+      5060 # sip
+    ];
+  };
 
   services.asterisk = {
     confFiles = {
-- 
cgit v1.2.3