firewall test

flake.lock

@@ -89,11 +89,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1721431043,
-        "narHash": "sha256-xmJwGXg/y0k40JETVhWGLOMtWmeOb/k2WWMm1yhLbYE=",
+        "lastModified": 1721478374,
+        "narHash": "sha256-hUoPSUqTvU1lHThhiYbPWks4PVjtWUiNySbYzbncGRI=",
         "owner": "nix-community",
         "repo": "flake-firefox-nightly",
-        "rev": "6ba26a0f3d9d69e9910bab0bed0f5d994089a196",
+        "rev": "222ef1fb1f7359d47bb8205e33de21fd7e961a26",
         "type": "github"
       },
       "original": {

home/users/toothpick/imports.nix

@@ -47,6 +47,7 @@
       QT_QPA_PLATFORM = "wayland-egl";
       SDL_VIDEODRIVER = "wayland";
       XDG_SESSION_TYPE = "wayland";
+      ELECTRON_OZONE_PLATFORM_HINT = "auto";
     };
   };
 }

nixos/hosts/cnix/default.nix

@@ -77,10 +77,19 @@ in {
     pkiBundle = "/etc/secureboot";
   };
 
-  # Enable networking
+  # Networking
   networking = {
     networkmanager.enable = true;
     hostName = "cnix";
+    nftables.enable = true;
+    firewall = {
+      enable = true;
+      interfaces = {
+        "enp7s0" = {
+          allowedTCPPorts = [22 80 443];
+        };
+      };
+    };
   };
 
   environment.sessionVariables = {

nixos/hosts/cnix/imports.nix

@@ -24,6 +24,7 @@
     ../../services/xserver-cnix.nix
     ../../services/locate.nix
     ../../services/power.nix
+    ../../services/samba.nix
 
     # extra
     ../../extra/gaming.nix

nixos/hosts/toothpc/imports.nix

@@ -43,6 +43,7 @@
       python312Packages.nvidia-ml-py
 
       # Util
+      samba4Full
       anyrun
       curl
       fzf

nixos/services/samba.nix

@@ -0,0 +1,19 @@
+{pkgs, ...}: {
+  services = {
+    samba = {
+      enable = true;
+      package = pkgs.samba4Full;
+      openFirewall = true;
+    };
+    avahi = {
+      publish.enable = true;
+      publish.userServices = true;
+      enable = true;
+      openFirewall = true;
+    };
+    samba-wsdd = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+}