Skip to content

Commit

Permalink
Added an option for 'networking.firewall.checkReversePath', and set i…
Browse files Browse the repository at this point in the history
…t to 'loose' to allow using tailscale exit nodes.
  • Loading branch information
Tygo-van-den-Hurk committed Oct 15, 2024
1 parent 65e2f0c commit 4cd97b6
Show file tree
Hide file tree
Showing 3 changed files with 7 additions and 8 deletions.
11 changes: 5 additions & 6 deletions modules/common/networking/firewall/default.nix
Original file line number Diff line number Diff line change
@@ -1,11 +1,10 @@
## Defines the networking options.
#! Warning editing this will edit it for all hosts. Not just for one machine.
arguments @ { config, pkgs, lib, machine-settings, ... } : ( builtins.trace "(System) Loading: ${toString ./.}..." {

networking.firewall = {
enable = lib.mkDefault true; # Are you sure? Did you read the top #!comment !?
allowedTCPPorts = lib.mkDefault [ ]; # Are you sure? Did you read the top #!comment !?
allowedUDPPorts = lib.mkDefault [ ]; # Are you sure? Did you read the top #!comment !?
networking.firewall = {
enable = lib.mkDefault true; # Are you sure? Did you read the top #!comment !?
allowedTCPPorts = lib.mkDefault [ ]; # Are you sure? Did you read the top #!comment !?
allowedUDPPorts = lib.mkDefault [ ]; # Are you sure? Did you read the top #!comment !?
checkReversePath = lib.mkDefault "loose"; # TailScale
};

})
2 changes: 1 addition & 1 deletion modules/common/sops/tygo-van-den-hurk

0 comments on commit 4cd97b6

Please sign in to comment.