From d8f7401263a36cce780ed38efce8aaf86d85fd96 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Fri, 27 Feb 2026 13:31:27 -0600
Subject: bittorrent killswitch

---
 hosts/ganymede/nixos.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/hosts/ganymede/nixos.nix b/hosts/ganymede/nixos.nix
index 5ceb4e6..c6d7bd1 100644
--- a/hosts/ganymede/nixos.nix
+++ b/hosts/ganymede/nixos.nix
@@ -58,6 +58,17 @@
     };
   };
 
+  # kill-switch for qbittorrent traffic
+  networking.firewall.extraCommands =
+    # bash
+    ''
+      # Allow qbittorrent traffic over wg0
+      iptables -A OUTPUT -o wg0 -m owner --uid-owner qbittorrent -j ACCEPT
+
+      # Drop qbittorrent traffic over anything else
+      iptables -A OUTPUT ! -o wg0 -m owner --uid-owner qbittorrent -j REJECT
+    '';
+
   services.fail2ban.enable = true;
 
   # merge logs from subdomains
-- 
cgit v1.3.1