21 lines
361 B
Nix
21 lines
361 B
Nix
{
|
|
networking = {
|
|
firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [
|
|
80
|
|
443
|
|
];
|
|
trustedInterfaces = [ "tailscale0" ];
|
|
extraInputRules =
|
|
let
|
|
localIPv4Range = "192.168.10.0/24";
|
|
in
|
|
''
|
|
ip saddr ${localIPv4Range} accept
|
|
'';
|
|
};
|
|
nftables.enable = true;
|
|
};
|
|
}
|