albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Update firewall ports

Browse source
This commit is contained in:
albert 2024-10-22 15:02:14 +02:00
parent dc24ef3e85
commit 6918146846
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 33 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

56
nixos/hosts/framework-server/firewall.nix
View file

@ -2,29 +2,39 @@
networking = {
firewall = {
enable = true;
interfaces.wireguard0 = {
allowedTCPPorts = [
# 53 # DNS
80 # HTTP
443 # HTTPS
42420 # Vintage Story
25565 # Minecraft
1443 # Headscale DERP (tcp)
25 # Mailserver
143 # Mailserver
465 # Mailserver
587 # Mailserver
993 # Mailserver
4190 # Mailserver
# 5696 # dsm-kmip server
4443 # Jitsi
];
allowedUDPPorts = [
# 53 # DNS (udp)
10000 # Jitsi Meet (udp)
# 15636 # Enshrouded - Game
# 15637 # Enshrouded - Query Port
];
interfaces = {
tailscale0 = {
allowedTCPPorts = [
22 # SSH
53 # DNS
80 # HTTP
443 # HTTPS
5696 # dsm-kmip server
];
};
wireguard0 = {
allowedTCPPorts = [
# 53 # DNS
80 # HTTP
443 # HTTPS
42420 # Vintage Story
25565 # Minecraft
1443 # Headscale DERP (tcp)
25 # Mailserver
143 # Mailserver
465 # Mailserver
587 # Mailserver
993 # Mailserver
4190 # Mailserver
4443 # Jitsi
];
allowedUDPPorts = [
# 53 # DNS (udp)
10000 # Jitsi Meet (udp)
# 15636 # Enshrouded - Game
# 15637 # Enshrouded - Query Port
];
};
};
};
};