From 43c9825e49d25fbd2c19abcdeb8f73aee8be2a4c Mon Sep 17 00:00:00 2001 From: Gregor Kleen Date: Wed, 14 May 2025 10:50:27 +0200 Subject: ... --- hosts/sif/default.nix | 34 ---------------------------------- hosts/sif/ruleset.nft | 8 ++++---- 2 files changed, 4 insertions(+), 38 deletions(-) (limited to 'hosts/sif') diff --git a/hosts/sif/default.nix b/hosts/sif/default.nix index 0897e1d8..f4de24e8 100644 --- a/hosts/sif/default.nix +++ b/hosts/sif/default.nix @@ -126,38 +126,8 @@ in { rulesetFile = ./ruleset.nft; }; - # firewall = { - # enable = true; - # allowedTCPPorts = [ 22 # ssh - # 8000 # quickserve - # ]; - # }; - - # wlanInterfaces = { - # wlan0 = { - # device = "wlp82s0"; - # }; - # }; - - # bonds = { - # "lan" = { - # interfaces = [ "wlan0" "enp0s31f6" "dock0" ]; - # driverOptions = { - # miimon = "1000"; - # mode = "active-backup"; - # primary_reselect = "always"; - # }; - # }; - # }; - useDHCP = false; useNetworkd = true; - - # interfaces."tinc.yggdrasil" = { - # virtual = true; - # virtualType = config.services.tinc.networks.yggdrasil.interfaceType; - # macAddress = "5c:93:21:c3:61:39"; - # }; }; environment.etc."NetworkManager/dnsmasq.d/libvirt_dnsmasq.conf" = { @@ -751,10 +721,6 @@ in { home-manager.sharedModules = [ flakeInputs.nixVirt.homeModules.default ]; - environment.pathsToLink = [ - "share/zsh" - ]; - system.stateVersion = "24.11"; }; } diff --git a/hosts/sif/ruleset.nft b/hosts/sif/ruleset.nft index 2af8b2ee..62339f69 100644 --- a/hosts/sif/ruleset.nft +++ b/hosts/sif/ruleset.nft @@ -61,7 +61,7 @@ table inet filter { counter mosh-rx {} counter wg-rx {} counter yggdrasil-gre-rx {} - counter quickserve-rx {} + counter miniserve-rx {} counter ausweisapp2-rx {} counter established-rx {} @@ -81,7 +81,7 @@ table inet filter { counter mosh-tx {} counter wg-tx {} counter yggdrasil-gre-tx {} - counter quickserve-tx {} + counter miniserve-tx {} counter tx {} @@ -134,7 +134,7 @@ table inet filter { tcp dport 22 counter name ssh-rx accept udp dport 60000-61000 counter name mosh-rx accept - tcp dport 8000 counter name quickserve-rx accept + tcp dport 8080 counter name miniserve-rx accept udp dport 24727 counter name ausweisapp2-rx accept udp dport 51820-51822 counter name wg-rx accept @@ -173,7 +173,7 @@ table inet filter { udp sport 51820-51822 counter name wg-tx iifname "yggdrasil-wg-*" meta l4proto gre counter name yggdrasil-gre-tx - tcp sport 8000 counter name quickserve-tx accept + tcp sport 8080 counter name miniserve-tx accept oifname virbr0 udp sport 67 counter name libvirt-dhcp accept oifname virbr0 udp sport 547 counter name libvirt-dhcp accept -- cgit v1.2.3