all repos — nixfiles @ 80ebdb01e24988de91500d062b825853352a31e5

System and user configuration, managed by nix and home-manager

extract and reduce firewall config

Alin
commit

80ebdb01e24988de91500d062b825853352a31e5

parent

78d75774511324aef146b92cdfc353f9f852823e

1 file changed, 0 insertions(+), 12 deletions(-)

changed files
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -191,26 +191,14 @@ ];
       };
     };
     firewall = {
-      enable = true;
-      allowPing = true;
-      pingLimit = "--limit 60/minute --limit-burst 30";
-      logRefusedConnections = false;
       allowedTCPPorts = [
-        22
-        80
-        443
         53
         853
         6379
         9418
-        6922
       ];
       allowedUDPPorts = [
         53
-        443 # HTTP/3 (QUIC)
-        3478
-        6885 # DHT
-        6922
       ];
       trustedInterfaces = [
         "podman0"