firewall test

2024-07-20 17:34:34 +02:00
parent 640691656c
commit 66d370d256
6 changed files with 35 additions and 4 deletions
--- a/nixos/hosts/cnix/default.nix
+++ b/nixos/hosts/cnix/default.nix
@@ -77,10 +77,19 @@ in {
    pkiBundle = "/etc/secureboot";
  };

-  # Enable networking
+  # Networking
  networking = {
    networkmanager.enable = true;
    hostName = "cnix";
+    nftables.enable = true;
+    firewall = {
+      enable = true;
+      interfaces = {
+        "enp7s0" = {
+          allowedTCPPorts = [22 80 443];
+        };
+      };
+    };
  };

  environment.sessionVariables = {
--- a/nixos/hosts/cnix/imports.nix
+++ b/nixos/hosts/cnix/imports.nix
@@ -24,6 +24,7 @@
    ../../services/xserver-cnix.nix
    ../../services/locate.nix
    ../../services/power.nix
+    ../../services/samba.nix

    # extra
    ../../extra/gaming.nix