SK-Development-Studios/Nixos-Configuration
2
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

migrate firewall config increase security

Browse source
This commit is contained in:
Jermeiah S 2025-06-19 16:21:37 -04:00
parent 1cf7f2c054
commit 4ecc6a4ae6
No known key found for this signature in database
4 changed files with 55 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

14
modules/nixos/common/incus.nix
View file

@ -14,6 +14,20 @@
};
networking = {
firewall = {
enable = true;
interfaces = {
ygg0 = {
allowedTCPPorts = [ 22 ];
allowedUDPPorts = [ ];
};
};
# Default deny policy for all interfaces (including ygg0)
allowPing = false;
allowedTCPPorts = [ ];
allowedUDPPorts = [ ];
};
dhcpcd.enable = false;
useDHCP = false;
useHostResolvConf = false;