Change to more generic firewall rule

This commit is contained in:
Bun 2025-03-18 02:52:30 -04:00
parent 847684f67a
commit 7635beefb7

View file

@ -2,8 +2,8 @@
{ {
networking = { networking = {
firewall.extraInputRules = '' firewall.extraInputRules = ''
ip saddr { 10.0.0.0/24, 10.1.0.0/24, 10.2.0.0/24, 10.100.0.0/24 } tcp dport 2049 accept comment "Accept NFS" ip saddr { 10.0.0.0/8, 10.100.0.0/24 } tcp dport 2049 accept comment "Accept NFS"
ip saddr { ${config.ips.pc}, ${config.secrets.ips.luna}, ${config.secrets.ips.corn} } tcp dport { 1935, 1945 } accept comment "Accept RTMP" ip saddr { 10.0.0.0/8, ${config.secrets.ips.luna}, ${config.secrets.ips.corn} } tcp dport { 1935, 1945 } accept comment "Accept RTMP"
''; '';
# Nftables configuration only if server is enabled # Nftables configuration only if server is enabled