albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Update frankfurt firewall rules

Browse source
This commit is contained in:
albert 2025-03-09 09:56:37 -07:00
parent 1c3755dd88
commit 150adc5f92
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 8 additions and 7 deletions

15
nixos/hosts/frankfurt-linode-01/firewall.nix
View file

@ -6,7 +6,7 @@
80 # HTTP 80 # HTTP
443 # HTTPS 443 # HTTPS
42420 # Vintage Story 42420 # Vintage Story
25565 # Minecraft # 25565 # Minecraft
25 # Mailserver 25 # Mailserver
143 # Mailserver 143 # Mailserver
465 # Mailserver 465 # Mailserver
@ -17,20 +17,21 @@
]; ];
allowedUDPPorts = [ allowedUDPPorts = [
10000 # Jitsi Meet (udp) 10000 # Jitsi Meet (udp)
15636 # Enshrouded - Game # 15636 # Enshrouded - Game
15637 # Enshrouded - Query Port # 15637 # Enshrouded - Query Port
]; ];
}; };
nftables = { nftables = {
enable = true; enable = true;
# NOTE: If these need to be re-enabled, move them to the PREROUTING chain below
# iifname "enp0s4" udp dport 15636 dnat to 10.100.1.2:15636;
# iifname "enp0s4" udp dport 15637 dnat to 10.100.1.2:15637;
ruleset = '' ruleset = ''
table ip nat { table ip nat {
chain PREROUTING { chain PREROUTING {
type nat hook prerouting priority dstnat; policy accept; type nat hook prerouting priority dstnat; policy accept;
iifname "enp0s4" udp dport 10000 dnat to 10.100.0.2:10000; iifname "enp0s4" udp dport 10000 dnat to 10.100.0.2:10000;
iifname "enp0s4" udp dport 15636 dnat to 10.100.1.2:15636;
iifname "enp0s4" udp dport 15637 dnat to 10.100.1.2:15637;
} }
} }
''; '';
@ -42,8 +43,8 @@
externalInterface = "wireguard0"; externalInterface = "wireguard0";
forwardPorts = [ forwardPorts = [
{ sourcePort = 10000; proto = "udp"; destination = "10.100.0.2:10000"; } { sourcePort = 10000; proto = "udp"; destination = "10.100.0.2:10000"; }
{ sourcePort = 15636; proto = "udp"; destination = "10.100.1.2:15636"; } # { sourcePort = 15636; proto = "udp"; destination = "10.100.1.2:15636"; }
{ sourcePort = 15637; proto = "udp"; destination = "10.100.1.2:15637"; } # { sourcePort = 15637; proto = "udp"; destination = "10.100.1.2:15637"; }
]; ];
}; };
}; };