sif: nftables

1 files changed, 10 insertions, 4 deletions

diff --git a/hosts/sif/default.nix b/hosts/sif/default.nix
index 11f74373..bcfa1e10 100644
--- a/hosts/sif/default.nix
+++ b/hosts/sif/default.nix
@@ -65,13 +65,19 @@ in {
         "::1" = [ "sif.yggdrasil" "sif" ];
       };
 
-      firewall = {
+      firewall.enable = false;
+      nftables = {
         enable = true;
-        allowedTCPPorts = [ 22 # ssh
-                            8000 # quickserve
-                          ];
+        rulesetFile = ./ruleset.nft;
       };
 
+      # firewall = {
+      #   enable = true;
+      #   allowedTCPPorts = [ 22 # ssh
+      #                       8000 # quickserve
+      #                     ];
+      # };
+
       # wlanInterfaces = {
       #   wlan0 = {
       #     device = "wlp82s0";