Ryan Yin 72a6e95cab security: make firewall secure-by-default, disable explicitly on servers ...

Flip the base firewall default to ON so new hosts are protected by default. Servers keep the firewall off (trusted internal LAN, WAN protected at the router) via explicit overrides in modules/nixos/server/{server,server-aarch64}.nix. Behavior-preserving for all 18 current hosts; adds a security-firewall eval test guarding the per-host state.

2026-08-26 18:14:43 +08:00

..

src

chore: replace nixos-generators image outputs

2026-06-14 14:10:08 +08:00

tests

security: make firewall secure-by-default, disable explicitly on servers

2026-08-26 18:14:43 +08:00

default.nix

feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'

2025-07-30 12:17:24 +08:00