kiaragrouwstra/infra
0
0
Fork 0
forked from the-distro/infra
Code Pull requests Activity

enable nftables on all hosts

Browse source
This commit is contained in:
Yureka 2024-07-11 02:05:35 +02:00
parent b14f155d55
commit 329f267b02
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
common/base-server.nix
View file

@ -4,6 +4,7 @@
nix.package = lib.mkDefault pkgs.lix; nix.package = lib.mkDefault pkgs.lix;
services.openssh.enable = lib.mkForce true; services.openssh.enable = lib.mkForce true;
networking.nftables.enable = true;
networking.firewall.enable = true; networking.firewall.enable = true;
networking.firewall.logRefusedConnections = false; networking.firewall.logRefusedConnections = false;
networking.firewall.logReversePathDrops = true; networking.firewall.logReversePathDrops = true;