noe/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

add nginx firewall stuff

Browse source
This commit is contained in:
41666 2023-12-22 20:23:23 -05:00
parent 9431224665
commit 2ea0070ca1
2 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
nixos/features/nginx.nix
View file

@ -1,7 +1,7 @@
{pkgs, ...}: {
services.nginx = {
enable = true;
recommendedTlsSettings = true;
#recommendedTlsSettings = true;
recommendedOptimisation = true;
recommendedBrotliSettings = true;
recommendedGzipSettings = true;
@ -13,4 +13,10 @@
acceptTerms = true;
defaults.email = "acme@kat.cafe";
};
networking.firewall = {
enable = true;
allowedTCPPorts = [ 80 443 ];
allowedUDPPorts = [ 443 ];
};
}

2
nixos/features/podman.nix
View file

@ -11,7 +11,7 @@
};
networking.firewall = {
# interfaces.podman0.allowedUDPPorts = [ 53 ];
interfaces.podman0.allowedUDPPorts = [ 53 ];
trustedInterfaces = [ "podman0" ];
};