Raphaël Billet
28 lines
853 B
Nix
28 lines
853 B
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
{
|
|
# Hostname
|
|
networking.hostName = "numbus-server";
|
|
|
|
# Enable networking and firewall
|
|
networking.interfaces.eth0.ipv4.addresses = [
|
|
{
|
|
address = "HOME_SERVER_IP";
|
|
prefixLength = 24;
|
|
}
|
|
];
|
|
networking.defaultGateway = "HOME_ROUTER_IP";
|
|
networking.nameservers = [ "HOME_SERVER_IP" "9.9.9.9" ];
|
|
networking.networkmanager.enable = true;
|
|
networking.nftables.enable = true;
|
|
networking.firewall.enable = true;
|
|
# networking.firewall.extraCommands = "
|
|
# iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
|
|
# iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 8443
|
|
# ";
|
|
|
|
# Open ports in the firewall
|
|
networking.firewall.allowPing = true;
|
|
networking.firewall.allowedTCPPorts = [ 53 80 443 ];
|
|
networking.firewall.allowedUDPPorts = [ 53 ];
|
|
} |