networking.firewall.checkReversePath = "loose" for tailscale

2023-09-11 22:38:44 +03:00 · 2023-09-11 22:38:44 +03:00 · 94253212c6
commit 94253212c6
parent f33f8b3d1b
4 changed files with 1 additions and 3 deletions
--- a/hosts/fra1-a/configuration.nix
+++ b/hosts/fra1-a/configuration.nix
@ -91,7 +91,6 @@
    firewall = {
      allowedUDPPorts = [53];
      allowedTCPPorts = [22 53];
-      checkReversePath = "loose"; # for tailscale
    };
  };

--- a/hosts/vno1-oh2/configuration.nix
+++ b/hosts/vno1-oh2/configuration.nix
@ -603,7 +603,6 @@
    firewall = {
      allowedUDPPorts = [53 80 443];
      allowedTCPPorts = [53 80 443];
-      checkReversePath = "loose"; # for tailscale
    };
  };
 }
--- a/hosts/vno1-rp3b/configuration.nix
+++ b/hosts/vno1-rp3b/configuration.nix
@ -108,7 +108,6 @@
      }
    ];
    firewall = {
-      checkReversePath = "loose"; # for tailscale
    };
  };

--- a/modules/base/default.nix
+++ b/modules/base/default.nix
@ -144,6 +144,7 @@
    };

    networking.firewall.logRefusedConnections = false;
+    networking.firewall.checkReversePath = "loose"; # for tailscale

    services = {
      chrony = {