starred/nix-config-ryan4yin
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-08-27 22:04:09 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity
2,267 Commits 5 Branches 35 Tags
212f45e2caa1192902115df2a824fd5cdd29a1ab
Commit Graph
2 Commits
Author SHA1 Message Date
Ryan Yin b46bb471d8 test: fix security-firewall eval test to scalar per-host values 2026-08-26 18:14:43 +08:00
Ryan Yin 72a6e95cab security: make firewall secure-by-default, disable explicitly on servers 
Flip the base firewall default to ON so new hosts are protected by default. Servers keep the firewall off (trusted internal LAN, WAN protected at the router) via explicit overrides in modules/nixos/server/{server,server-aarch64}.nix. Behavior-preserving for all 18 current hosts; adds a security-firewall eval test guarding the per-host state.
 2026-08-26 18:14:43 +08:00