diff options
| author | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2026-02-27 13:31:27 -0600 |
|---|---|---|
| committer | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2026-02-27 13:31:27 -0600 |
| commit | d8f7401263a36cce780ed38efce8aaf86d85fd96 (patch) | |
| tree | 73a9228e581e52eb45bbf9e1309e86cceded3d40 /hosts/ganymede | |
| parent | bc2727db372882a7160b92859b387efe58a187c1 (diff) | |
bittorrent killswitch
Diffstat (limited to 'hosts/ganymede')
| -rw-r--r-- | hosts/ganymede/nixos.nix | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/hosts/ganymede/nixos.nix b/hosts/ganymede/nixos.nix index 5ceb4e6..c6d7bd1 100644 --- a/hosts/ganymede/nixos.nix +++ b/hosts/ganymede/nixos.nix @@ -58,6 +58,17 @@ }; }; + # kill-switch for qbittorrent traffic + networking.firewall.extraCommands = + # bash + '' + # Allow qbittorrent traffic over wg0 + iptables -A OUTPUT -o wg0 -m owner --uid-owner qbittorrent -j ACCEPT + + # Drop qbittorrent traffic over anything else + iptables -A OUTPUT ! -o wg0 -m owner --uid-owner qbittorrent -j REJECT + ''; + services.fail2ban.enable = true; # merge logs from subdomains |