nix/nixos/hosts/framework-server/firewall.nix
2024-10-24 04:24:15 +02:00

39 lines
923 B
Nix

{ ... }: {
networking = {
firewall = {
enable = true;
interfaces = {
tailscale0 = {
allowedTCPPorts = [
53 # DNS
80 # HTTP
443 # HTTPS
];
};
wireguard0 = {
allowedTCPPorts = [
# 53 # DNS
80 # HTTP
443 # HTTPS
42420 # Vintage Story
25565 # Minecraft
1443 # Headscale DERP (tcp)
25 # Mailserver
143 # Mailserver
465 # Mailserver
587 # Mailserver
993 # Mailserver
4190 # Mailserver
4443 # Jitsi
];
allowedUDPPorts = [
# 53 # DNS (udp)
10000 # Jitsi Meet (udp)
# 15636 # Enshrouded - Game
# 15637 # Enshrouded - Query Port
];
};
};
};
};
}