aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCollin Williams <96917990+bluedragon1221@users.noreply.github.com>2026-01-25 07:13:43 -0600
committerCollin Williams <96917990+bluedragon1221@users.noreply.github.com>2026-01-25 07:13:43 -0600
commit606b7ae3bb2b45e094132dbec4574faa4317331f (patch)
tree5e0cefa2745c2ea430773e4a74c3d45d8fc11496
parente5b58133c49d7c99f96de9f2354cd3f10ecbbf60 (diff)
firewall cfg
-rw-r--r--hosts/ganymede/nixos.nix2
-rw-r--r--modules/services/nixos/networking/default.nix5
2 files changed, 4 insertions, 3 deletions
diff --git a/hosts/ganymede/nixos.nix b/hosts/ganymede/nixos.nix
index 86a9983..6bfd296 100644
--- a/hosts/ganymede/nixos.nix
+++ b/hosts/ganymede/nixos.nix
@@ -15,8 +15,6 @@
services.tailscale.extraSetFlags = ["--advertise-exit-node"];
- networking.firewall.allowedUDPPorts = [51820];
-
# backup usb teather configuration
systemd.network.networks."80-usb-teather" = {
name = "enp0s20f0u2";
diff --git a/modules/services/nixos/networking/default.nix b/modules/services/nixos/networking/default.nix
index 9fa56da..a042411 100644
--- a/modules/services/nixos/networking/default.nix
+++ b/modules/services/nixos/networking/default.nix
@@ -6,5 +6,8 @@
./resolved.nix
];
- networking.firewall.enable = true;
+ networking.firewall = {
+ enable = true;
+ checkReversePath = "loose";
+ };
}