mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-08-24 12:13:57 +02:00
11 lines
380 B
Nix
11 lines
380 B
Nix
# Desktops hold personal data and laptops join untrusted networks, so enable the
|
|
# firewall here (repo-wide default is off, see modules/nixos/base/ssh.nix).
|
|
# SSH/Tailscale/LocalSend/Sunshine keep working via their own `openFirewall` options.
|
|
{
|
|
networking.firewall = {
|
|
enable = true;
|
|
# Trust everything from the tailnet.
|
|
trustedInterfaces = [ "tailscale0" ];
|
|
};
|
|
}
|