Raphaël Numbus
14 lines
293 B
Nix
14 lines
293 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
config = {
|
|
networking.nftables.enable = true;
|
|
networking.firewall = {
|
|
enable = true;
|
|
allowPing = true;
|
|
allowedTCPPorts = [ 53 80 443 ];
|
|
allowedUDPPorts = [ 53 443 ];
|
|
interfaces."podman*".allowedTCPPorts = [ 443 ];
|
|
};
|
|
};
|
|
} |