feat(desktop): enable the firewall on desktop machines

Signed-off-by: Ryan Yin <xiaoyin_c@qq.com>
This commit is contained in:
Ryan Yin
2026-07-26 22:26:01 +08:00
parent 74598b6f6b
commit 095dc5dee8
4 changed files with 14 additions and 10 deletions
+1 -3
View File
@@ -21,9 +21,7 @@ in
services.sunshine.enable = lib.mkForce false;
services.tuned.ppdSettings.main.default = lib.mkForce "power-saver";
# This laptop joins untrusted networks and the firewall is disabled
# (modules/nixos/base/ssh.nix), so a 0.0.0.0:9100 node-exporter would be exposed
# to whatever network it is on. It is no longer scraped anyway - disable it.
# Laptop joins untrusted networks and is no longer scraped; don't expose :9100.
services.prometheus.exporters.node.enable = lib.mkForce false;
networking = {