Personal Nix setup

Set up firewall correctly for desktop

Changed files
+15 -4
modules
desktop
server
+14 -3
modules/desktop/default.nix
···
config = mkIf cfg.enable {
users.users."${user}".extraGroups = [ "video" ];
-
networking.networkmanager = {
-
enable = mkDefault true;
-
wifi.powersave = true;
+
networking = {
+
firewall = {
+
enable = mkDefault true;
+
checkReversePath = "loose";
+
};
+
nftables = {
+
enable = mkForce true;
+
checkRuleset = false;
+
flushRuleset = true;
+
};
+
networkmanager = {
+
enable = mkDefault true;
+
wifi.powersave = true;
+
};
};
hardware = {
+1 -1
modules/server/sshd.nix
···
services.openssh = {
enable = true;
-
openFirewall = false;
+
openFirewall = mkDefault (!config.modules.router.enable);
};
};
}