Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

many changes

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2025-05-08 22:46:20 +02:00
parent 3b01625f7d
commit bc57914131
8 changed files with 219 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

1
hosts/fw/modules/firewall.nix
View file

@ -34,6 +34,7 @@
iifname "lan" tcp dport 5931 counter accept comment "Spice"
iifname { "server", "vserver", "vm-*", "lan", "wg_cloonar" } counter accept comment "allow trusted to router"
iifname { "multimedia", "smart", "infrastructure", "podman0", "setup" } udp dport { 53, 5353 } counter accept comment "DNS"
iifname { "multimedia", "smart", "infrastructure", "server", "lan", "guest" } udp dport { 67 } counter accept comment "DHCP"
iifname { "wan", "multimedia" } icmp type { echo-request, destination-unreachable, time-exceeded } counter accept comment "Allow select ICMP"
# Accept mDNS for avahi reflection