all repos — nixfiles @ fe7fb42e892c673c9ce713a41307e6029a2c3b67

System and user configuration, managed by nix and home-manager

move relevant firewall configuration to auth-dns role

Alin
commit

fe7fb42e892c673c9ce713a41307e6029a2c3b67

parent

6dfb897229989f9e4515ff15644526086e70109e

2 files changed, 5 insertions(+), 4 deletions(-)

changed files
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -149,12 +149,8 @@ };
     };
     firewall = {
       allowedTCPPorts = [
-        53
         853
         9418
-      ];
-      allowedUDPPorts = [
-        53
       ];
       trustedInterfaces = [
         "podman0"
M system/roles/auth-dns.nix → system/roles/auth-dns.nix
@@ -21,6 +21,11 @@ in
 {
   age.secrets.powerdns.file = ../../secrets/powerdns.age;
 
+  networking.firewall = {
+    allowedTCPPorts = [ 53 ];
+    allowedUDPPorts = [ 53 ];
+  };
+
   services.powerdns = {
     enable = true;
     secretFile = config.age.secrets.powerdns.path;