firewall test

nixos/hosts/cnix/default.nix

@@ -77,10 +77,19 @@ in {
     pkiBundle = "/etc/secureboot";
   };
 
-  # Enable networking
+  # Networking
   networking = {
     networkmanager.enable = true;
     hostName = "cnix";
+    nftables.enable = true;
+    firewall = {
+      enable = true;
+      interfaces = {
+        "enp7s0" = {
+          allowedTCPPorts = [22 80 443];
+        };
+      };
+    };
   };
 
   environment.sessionVariables = {

nixos/hosts/cnix/imports.nix

@@ -24,6 +24,7 @@
     ../../services/xserver-cnix.nix
     ../../services/locate.nix
     ../../services/power.nix
+    ../../services/samba.nix
 
     # extra
     ../../extra/gaming.nix

nixos/hosts/toothpc/imports.nix

@@ -43,6 +43,7 @@
       python312Packages.nvidia-ml-py
 
       # Util
+      samba4Full
       anyrun
       curl
       fzf

nixos/services/samba.nix

@@ -0,0 +1,19 @@
+{pkgs, ...}: {
+  services = {
+    samba = {
+      enable = true;
+      package = pkgs.samba4Full;
+      openFirewall = true;
+    };
+    avahi = {
+      publish.enable = true;
+      publish.userServices = true;
+      enable = true;
+      openFirewall = true;
+    };
+    samba-wsdd = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+}