noe/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

add nginx firewall stuff

Browse source
This commit is contained in:
41666 2023-12-22 20:23:23 -05:00
parent 9431224665
commit 2ea0070ca1
2 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nixos/features/nginx.nix
View file

@ -1,7 +1,7 @@
{pkgs, ...}: { {pkgs, ...}: {
services.nginx = { services.nginx = {
enable = true; enable = true;
recommendedTlsSettings = true; #recommendedTlsSettings = true;
recommendedOptimisation = true; recommendedOptimisation = true;
recommendedBrotliSettings = true; recommendedBrotliSettings = true;
recommendedGzipSettings = true; recommendedGzipSettings = true;
@ -13,4 +13,10 @@
acceptTerms = true; acceptTerms = true;
defaults.email = "acme@kat.cafe"; defaults.email = "acme@kat.cafe";
}; };
networking.firewall = {
enable = true;
allowedTCPPorts = [ 80 443 ];
allowedUDPPorts = [ 443 ];
};
} }

2
nixos/features/podman.nix
View file

@ -11,7 +11,7 @@
}; };
networking.firewall = { networking.firewall = {
# interfaces.podman0.allowedUDPPorts = [ 53 ]; interfaces.podman0.allowedUDPPorts = [ 53 ];
trustedInterfaces = [ "podman0" ]; trustedInterfaces = [ "podman0" ];
}; };