diff options
-rw-r--r-- | hosts/surtr/default.nix | 14 |
1 files changed, 0 insertions, 14 deletions
diff --git a/hosts/surtr/default.nix b/hosts/surtr/default.nix index 61d28f22..cd43b157 100644 --- a/hosts/surtr/default.nix +++ b/hosts/surtr/default.nix | |||
@@ -69,20 +69,6 @@ | |||
69 | enable = true; | 69 | enable = true; |
70 | rulesetFile = ./ruleset.nft; | 70 | rulesetFile = ./ruleset.nft; |
71 | }; | 71 | }; |
72 | |||
73 | firewall = { | ||
74 | enable = true; | ||
75 | allowPing = true; | ||
76 | allowedTCPPorts = [ | ||
77 | 22 # ssh | ||
78 | ]; | ||
79 | allowedUDPPorts = [ | ||
80 | 51820 51821 # wireguard | ||
81 | ]; | ||
82 | allowedUDPPortRanges = [ | ||
83 | { from = 60000; to = 61000; } # mosh | ||
84 | ]; | ||
85 | }; | ||
86 | }; | 72 | }; |
87 | 73 | ||
88 | systemd.network.networks."40-ens3".networkConfig = { | 74 | systemd.network.networks."40-ens3".networkConfig = { |