nix/nixos/hosts/framework-server/firewall.nix
2025-03-23 11:26:41 +01:00

38 lines
853 B
Nix

{ ... }: {
networking = {
firewall = {
enable = true;
allowedTCPPorts = [
53 # DNS
80 # HTTP
443 # HTTPS
];
interfaces = {
wireguard0 = {
allowedTCPPorts = [
80 # HTTP
443 # HTTPS
1443 # Headscale DERP (tcp)
25 # Mailserver
143 # Mailserver
465 # Mailserver
587 # Mailserver
993 # Mailserver
4190 # Mailserver
4443 # Jitsi
# Games
28015 # Rust
28016 # Rust
42420 # Vintage Story
25565 # Minecraft
];
allowedUDPPorts = [
28015 # Rust
28016 # Rust
10000 # Jitsi Meet (udp)
];
};
};
};
};
}