don/NixOS-Configs
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Activity

host/server/default | remove unneeded code

Browse source
This commit is contained in:
Don Harper 2025-08-07 17:14:21 -05:00
parent f00487236c
commit c54b9130c3
1 changed files with 0 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

18
hosts/server/default.nix
View file

@ -198,11 +198,8 @@ in {
# Open ports in the firewall. # Open ports in the firewall.
networking.firewall = { networking.firewall = {
enable = true; enable = true;
# always allow traffic from your Tailscale network
trustedInterfaces = [ "tailscale0" ]; trustedInterfaces = [ "tailscale0" ];
checkReversePath = "loose"; checkReversePath = "loose";
# allow the Tailscale UDP port through the firewall
allowedUDPPorts = [ config.services.tailscale.port ]; allowedUDPPorts = [ config.services.tailscale.port ];
allowedTCPPortRanges = [{ allowedTCPPortRanges = [{
from = 1714; from = 1714;
@ -212,22 +209,7 @@ in {
from = 1714; from = 1714;
to = 1764; to = 1764;
}]; }];
# allow you to SSH in over the public internet
allowedTCPPorts = [ 22 ]; allowedTCPPorts = [ 22 ];
interfaces = {
"tailscale0" = {
allowedTCPPorts = [ 22 8080 8443 ];
allowedTCPPortRanges = [{
from = 1714;
to = 1764;
}];
allowedUDPPortRanges = [{
from = 1714;
to = 1764;
}];
};
};
}; };
# This value determines the NixOS release from which the default # This value determines the NixOS release from which the default