all repos — nixfiles @ bdc97fb5f7ab03deafefefc01eeb8632ad19498c

System and user configuration, managed by nix and home-manager

router: explictly allow ssh on lan interfaces

Alin
commit

bdc97fb5f7ab03deafefefc01eeb8632ad19498c

parent

49c9a41d624c53b57b89224cc9fbe05d2488f34d

1 file changed, 5 insertions(+), 0 deletions(-)

changed files
M system/roles/router.nix → system/roles/router.nix
@@ -50,6 +50,11 @@ filterForward = true;
       extraForwardRules = ''
         iifname "${lan}"  oifname "${wan}" accept comment "from internal interfaces"
       '';
+      interfaces = {
+        "${lan}" = {
+          allowedTCPPorts = [ 22 ];
+        };
+      };
     };
     nftables = {
       enable = true;