forked from the-distro/infra
enable nftables on all hosts
This commit is contained in:
parent
b14f155d55
commit
329f267b02
|
@ -4,6 +4,7 @@
|
|||
nix.package = lib.mkDefault pkgs.lix;
|
||||
services.openssh.enable = lib.mkForce true;
|
||||
|
||||
networking.nftables.enable = true;
|
||||
networking.firewall.enable = true;
|
||||
networking.firewall.logRefusedConnections = false;
|
||||
networking.firewall.logReversePathDrops = true;
|
||||
|
|
Loading…
Reference in a new issue