albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions2

Update frankfurt firewall rules

Browse source
This commit is contained in:
albert 2025-03-09 09:56:37 -07:00
parent 1c3755dd88
commit 150adc5f92
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 8 additions and 7 deletions

15
nixos/hosts/frankfurt-linode-01/firewall.nix
View file

@ -6,7 +6,7 @@
80 # HTTP
443 # HTTPS
42420 # Vintage Story
25565 # Minecraft
# 25565 # Minecraft
25 # Mailserver
143 # Mailserver
465 # Mailserver
@ -17,20 +17,21 @@
];
allowedUDPPorts = [
10000 # Jitsi Meet (udp)
15636 # Enshrouded - Game
15637 # Enshrouded - Query Port
# 15636 # Enshrouded - Game
# 15637 # Enshrouded - Query Port
];
};
nftables = {
enable = true;
# NOTE: If these need to be re-enabled, move them to the PREROUTING chain below
# iifname "enp0s4" udp dport 15636 dnat to 10.100.1.2:15636;
# iifname "enp0s4" udp dport 15637 dnat to 10.100.1.2:15637;
ruleset = ''
table ip nat {
chain PREROUTING {
type nat hook prerouting priority dstnat; policy accept;
iifname "enp0s4" udp dport 10000 dnat to 10.100.0.2:10000;
iifname "enp0s4" udp dport 15636 dnat to 10.100.1.2:15636;
iifname "enp0s4" udp dport 15637 dnat to 10.100.1.2:15637;
}
}
'';
@ -42,8 +43,8 @@
externalInterface = "wireguard0";
forwardPorts = [
{ sourcePort = 10000; proto = "udp"; destination = "10.100.0.2:10000"; }
{ sourcePort = 15636; proto = "udp"; destination = "10.100.1.2:15636"; }
{ sourcePort = 15637; proto = "udp"; destination = "10.100.1.2:15637"; }
# { sourcePort = 15636; proto = "udp"; destination = "10.100.1.2:15636"; }
# { sourcePort = 15637; proto = "udp"; destination = "10.100.1.2:15637"; }
];
};
};