Fix some firewall rules

2025-03-18 06:09:07 -04:00 · 2025-03-18 06:09:07 -04:00 · d3a7fe8158
commit d3a7fe8158
parent 7e40fd4fb3
6 changed files with 26 additions and 17 deletions
--- a/modules/system/services/server/fileserver/nfs/default.nix
+++ b/modules/system/services/server/fileserver/nfs/default.nix
@ -15,6 +15,7 @@
      family = "inet";
      content = ''
        chain input {
+	  type filter hook input priority filter; policy drop;
          ip saddr 10.0.0.0/8 tcp dport 2049 accept comment "Accept NFS"
        }
      '';