[nidaros] Copy security config from pi4

2025-10-13 21:40:13 +02:00
parent e7240d511e
commit b1dd673fc5
2 changed files with 39 additions and 0 deletions
--- a/hosts/nidaros/security/firewall.nix
+++ b/hosts/nidaros/security/firewall.nix
@@ -0,0 +1,17 @@
+{ common, ... }:
+
+{
+  networking = {
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [
+        80
+        443
+      ];
+      extraInputRules = ''
+        ip saddr ${common.localIpRange} accept
+      '';
+    };
+    nftables.enable = true;
+  };
+}