TheWanderingCrow/CrOS
1
0
Fork 0
mirror of https://github.com/TheWanderingCrow/CrOS.git synced 2026-01-11 09:44:08 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

add firewall for non-lighthouse

Browse source
This commit is contained in:
TheWanderingCrow 2025-08-07 12:00:29 -04:00
parent 403b747449
commit 435d11e9e5
1 changed files with 16 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
hosts/common/core/nebula.nix
View file

@ -20,5 +20,21 @@ in {
inherit (s.hosts.${config.hostSpec.hostName}) cert isLighthouse;
key = config.sops.secrets."keys/nebula".path;
enable = true;
firewall = lib.mkIf (!config.services.nebula.networks.wce.isLighthouse) {
inbound = [
{
host = "any";
port = "any";
proto = "any";
}
];
outbound = [
{
host = "any";
port = "any";
proto = "any";
}
];
};
};
}