yanlin/nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Edit firewall config for wireguard

Browse source
This commit is contained in:
Yan Lin 2025-09-10 19:15:06 +02:00
parent c3527ce8e8
commit bf69e4701e
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hosts/nixos/vps/system.nix
View file

@ -26,7 +26,8 @@
useDHCP = true; # VPS typically use DHCP
firewall = {
enable = true;
allowedTCPPorts = [ 22 80 443 ]; # Only SSH by default
allowedTCPPorts = [ 22 80 443 ]; # SSH, HTTP, HTTPS
trustedInterfaces = [ "wg0" ]; # Allow all traffic through WireGuard interface
};
};