refactor: aquamarine - enable tailscale

2026-04-24 09:48:30 +02:00 · 2025-09-18 22:36:34 +08:00
parent 95abfef3a9
commit 0c6e5dc32e
9 changed files with 111 additions and 84 deletions
--- a/modules/nixos/base/networking/firewall.nix
+++ b/modules/nixos/base/networking/firewall.nix
@@ -0,0 +1,20 @@
+{
+  # for security reasons, only open the following ports to the network by default.
+  networking.firewall.allowedTCPPorts = [
+    # localsend
+    53317
+
+    # tcp ports for testing & sharing
+    63080
+    63081
+    63082
+    63083
+    63084
+    63085
+    63086
+    63087
+    63088
+    63089
+  ];
+  # networking.firewall.allowedUDPPorts = [ ... ];
+}