commit 9257f17326aee0e96789773760e6bde7f07ae4f6 · kitten.sh/system

+1 -1

machines/ramune/configuration.nix

···

       15
        
           router = {

     

       16
        
             enable = true;

     

       17
        
             ipv6 = true;

     

       18
       -
             upnp.enable = false;

     

       19
        
             interfaces = {

     

       20
        
               external = {

     

       21
        
                 name = "extern0";

···

       15
        
           router = {

     

       16
        
             enable = true;

     

       17
        
             ipv6 = true;

     

       18
       +
             upnp.enable = true;

     

       19
        
             interfaces = {

     

       20
        
               external = {

     

       21
        
                 name = "extern0";

+1 -1

modules/router/upnp.nix

···

       29
        
               clean_ruleset_interval=600

     

       30
        
               uuid=78b8b903-83c1-4036-8fcd-f64aee25baca

     

       31
        
               allow 1024-65535 ${intern.cidr} 1024-65535

     

       32
       -
               deny 0-65535 ${extern.cidr} 0-65535

     

       33
        
             '';

     

       34
        
           };

     

       35

···

       29
        
               clean_ruleset_interval=600

     

       30
        
               uuid=78b8b903-83c1-4036-8fcd-f64aee25baca

     

       31
        
               allow 1024-65535 ${intern.cidr} 1024-65535

     

       32
       +
               deny 0-65535 0.0.0.0/0 0-65535

     

       33
        
             '';

     

       34
        
           };

     

       35