Fix some firewall rules

2025-03-18 06:09:07 -04:00 · 2025-03-18 06:09:07 -04:00 · d3a7fe8158
commit d3a7fe8158
parent 7e40fd4fb3
6 changed files with 26 additions and 17 deletions
--- a/modules/system/services/server/nginx/rtmp/default.nix
+++ b/modules/system/services/server/nginx/rtmp/default.nix
@ -29,6 +29,7 @@
      family = "inet";
      content = ''
        chain input {
+	  type filter hook input priority 0; policy drop;
          ip saddr { 10.0.0.0/8, ${config.secrets.ips.luna}, ${config.secrets.ips.corn} } tcp dport 1935 accept comment "Accept RTMP"
        }
      '';