albert/nix
albert/nix
1
0
Fork 0
Code Issues Pull requests Activity Actions

Update firewall ports

Browse source
This commit is contained in:
albert 2024-10-22 15:02:14 +02:00
parent dc24ef3e85
commit 6918146846
Signed by: albert
GPG key ID: 3895DD267CA11BA9
1 changed files with 33 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

56
nixos/hosts/framework-server/firewall.nix
View file

@ -2,29 +2,39 @@
networking = { networking = {
firewall = { firewall = {
enable = true; enable = true;
interfaces.wireguard0 = { interfaces = {
allowedTCPPorts = [ tailscale0 = {
# 53 # DNS allowedTCPPorts = [
80 # HTTP 22 # SSH
443 # HTTPS 53 # DNS
42420 # Vintage Story 80 # HTTP
25565 # Minecraft 443 # HTTPS
1443 # Headscale DERP (tcp) 5696 # dsm-kmip server
25 # Mailserver ];
143 # Mailserver };
465 # Mailserver wireguard0 = {
587 # Mailserver allowedTCPPorts = [
993 # Mailserver # 53 # DNS
4190 # Mailserver 80 # HTTP
# 5696 # dsm-kmip server 443 # HTTPS
4443 # Jitsi 42420 # Vintage Story
]; 25565 # Minecraft
allowedUDPPorts = [ 1443 # Headscale DERP (tcp)
# 53 # DNS (udp) 25 # Mailserver
10000 # Jitsi Meet (udp) 143 # Mailserver
# 15636 # Enshrouded - Game 465 # Mailserver
# 15637 # Enshrouded - Query Port 587 # Mailserver
]; 993 # Mailserver
4190 # Mailserver
4443 # Jitsi
];
allowedUDPPorts = [
# 53 # DNS (udp)
10000 # Jitsi Meet (udp)
# 15636 # Enshrouded - Game
# 15637 # Enshrouded - Query Port
];
};
}; };
}; };
}; };