Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

add gitea to firewall

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2023-12-03 21:50:19 +01:00
parent 31e3b526f1
commit 5da0671fc0
1 changed files with 5 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

13
hosts/fw.cloonar.com/modules/firewall.nix
View file

@ -70,9 +70,8 @@
# Allow networks to access the dns and dhcp # Allow networks to access the dns and dhcp
iifname { iifname {
"lan", "lan",
"vb-gitea",
"podman0", "podman0",
"server",
"vserver",
"infrastructure", "infrastructure",
"wg_cloonar", "wg_cloonar",
"smart", "smart",
@ -81,8 +80,7 @@
iifname { iifname {
"lan", "lan",
"podman0", "podman0",
"server", "vb-gitea",
"vserver",
"infrastructure", "infrastructure",
"wg_cloonar", "wg_cloonar",
"smart", "smart",
@ -113,15 +111,14 @@
# lan and vpn to any # lan and vpn to any
# TODO: disable wan when finished # TODO: disable wan when finished
iifname { "wan", "lan", "server", "vserver", "podman0", "wg_cloonar" } oifname { "lan", "server", "vserver", "podman0", "infrastructure", "multimedia", "smart", "wrwks", "wg_cloonar", "wg_epicenter", "wg_ghetto_at" } counter accept iifname { "wan", "lan", "vb-gitea", "podman0", "wg_cloonar" } oifname { "lan", "vb-gitea", "podman0", "infrastructure", "multimedia", "smart", "wrwks", "wg_cloonar", "wg_epicenter", "wg_ghetto_at" } counter accept
iifname { "infrastructure" } oifname { "podman0", "server", "vserver" } counter accept iifname { "infrastructure" } oifname { "podman0", "vb-omada" } counter accept
# Allow trusted network WAN access # Allow trusted network WAN access
iifname { iifname {
"lan", "lan",
"infrastructure", "infrastructure",
"server", "vb-gitea",
"vserver",
"podman0", "podman0",
"multimedia", "multimedia",
"smart", "smart",