networking.firewall

1 files changed, 9 insertions, 4 deletions

diff --git a/bragi.nix b/bragi.nix
index 9626c5ba..3ef65f26 100644
--- a/bragi.nix
+++ b/bragi.nix
@@ -20,10 +20,6 @@
   networking.hostId = "2af11085";
   networking.wireless.enable = true;
 
-  networking.firewall = {
-    enable = false;
-  };
-
   nixpkgs.config.packageOverrides = pkgs:
     {
       trivmix = let trivmix = pkgs.haskellPackages.callPackage ./custom/trivmix.nix {}; in
@@ -180,6 +176,15 @@
                          ];
   };
 
+  networking.firewall = {
+    enable = true;
+    allowPing = true;
+    allowTCPPorts = [ 22
+                    ];
+    allowUDPPortRanges = [ { from = 60000; to = 61000; } # mosh
+                         ];
+  };
+
   services.dhcpd = {
     enable = true;
     interfaces = "enp1s0";