firewall

2024-08-02 14:47:01 +03:00
parent 2474b123d7
commit 9e9e5bb714
2 changed files with 17 additions and 2 deletions
--- a/hosts/fwminex/configuration.nix
+++ b/hosts/fwminex/configuration.nix
@@ -247,6 +247,20 @@ in
    hostId = "a6b19da0";
    hostName = "fwminex";
    domain = "servers.jakst";
-    firewall.rejectPackets = true;
+    firewall = {
+      rejectPackets = true;
+      allowedUDPPorts = [
+        53
+        80
+        443
+      ];
+      allowedTCPPorts = [
+        53
+        80
+        443
+        config.services.syncthing.relay.port
+        config.services.syncthing.relay.statusPort
+      ];
+    };
  };
 }