50 lines
1.2 KiB
Nix
50 lines
1.2 KiB
Nix
{ ... }: {
|
|
networking = {
|
|
firewall = {
|
|
enable = true;
|
|
interfaces = {
|
|
docker0 = {
|
|
allowedTCPPorts = [
|
|
22 # SSH
|
|
53 # DNS
|
|
80 # HTTP
|
|
443 # HTTPS
|
|
5696 # dsm-kmip server
|
|
];
|
|
};
|
|
tailscale0 = {
|
|
allowedTCPPorts = [
|
|
22 # SSH
|
|
53 # DNS
|
|
80 # HTTP
|
|
443 # HTTPS
|
|
5696 # dsm-kmip server
|
|
];
|
|
};
|
|
wireguard0 = {
|
|
allowedTCPPorts = [
|
|
# 53 # DNS
|
|
80 # HTTP
|
|
443 # HTTPS
|
|
42420 # Vintage Story
|
|
25565 # Minecraft
|
|
1443 # Headscale DERP (tcp)
|
|
25 # Mailserver
|
|
143 # Mailserver
|
|
465 # Mailserver
|
|
587 # Mailserver
|
|
993 # Mailserver
|
|
4190 # Mailserver
|
|
4443 # Jitsi
|
|
];
|
|
allowedUDPPorts = [
|
|
# 53 # DNS (udp)
|
|
10000 # Jitsi Meet (udp)
|
|
# 15636 # Enshrouded - Game
|
|
# 15637 # Enshrouded - Query Port
|
|
];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|