Cloonar/cloonar-assistant
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: setup rule to allow access from wan

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2025-04-28 10:06:05 +02:00
parent 74cd7c4859
commit 7021603e4e
2 changed files with 9 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
modules/cloonar-assistant/default.nix
View file

@ -57,6 +57,11 @@ let
in {
options.cloonar-assistant = {
setup = lib.mkOption {
type = lib.types.bool;
default = false;
description = "Enable access from Wan to Setup";
};
networkPrefix = lib.mkOption {
type = lib.types.str;
example = "10.42";
@ -165,6 +170,6 @@ in {
./networking
./updns
./home-assistant
./multiroom-audio
# ./multiroom-audio
];
}

3
modules/cloonar-assistant/networking/firewall.nix
View file

@ -34,6 +34,9 @@ in {
chain input-allow {
udp dport != { 53, 5353 } ct state new limit rate over 1/second burst 10 packets drop comment "rate limit for new connections"
iifname lo accept
${lib.optionalString config.cloonar-assistant.setup ''
iifname "wan" accept
''}
${lib.optionalString config.cloonar-assistant.vpn.enable ''
iifname "wan" udp dport 51820 counter accept comment "Wireguard traffic"
''}