all repos — nixfiles @ fe7fb42e892c673c9ce713a41307e6029a2c3b67

System and user configuration, managed by nix and home-manager

move relevant firewall configuration to auth-dns role

Alin
commit

fe7fb42e892c673c9ce713a41307e6029a2c3b67

parent

6dfb897229989f9e4515ff15644526086e70109e

1 file changed, 5 insertions(+), 0 deletions(-)

changed files
M system/roles/auth-dns.nix → system/roles/auth-dns.nix
@@ -21,6 +21,11 @@ in
 {
   age.secrets.powerdns.file = ../../secrets/powerdns.age;
 
+  networking.firewall = {
+    allowedTCPPorts = [ 53 ];
+    allowedUDPPorts = [ 53 ];
+  };
+
   services.powerdns = {
     enable = true;
     secretFile = config.age.secrets.powerdns.path;