summaryrefslogtreecommitdiff
path: root/modules/desktop/networking/firewall/default.nix
diff options
context:
space:
mode:
authorFuwn <[email protected]>2024-09-22 14:48:17 -0700
committerFuwn <[email protected]>2024-09-22 14:48:17 -0700
commitea494e9d76a76363ac9b652dc758f3daf1d499b6 (patch)
tree5b001e6a60f7e013e1cd6e04ade31117236cd185 /modules/desktop/networking/firewall/default.nix
parenttailscale: authenticate on all systems (diff)
downloadnixos-config-ea494e9d76a76363ac9b652dc758f3daf1d499b6.tar.xz
nixos-config-ea494e9d76a76363ac9b652dc758f3daf1d499b6.zip
modules: move desktop networking to desktop
Diffstat (limited to 'modules/desktop/networking/firewall/default.nix')
-rw-r--r--modules/desktop/networking/firewall/default.nix11
1 files changed, 11 insertions, 0 deletions
diff --git a/modules/desktop/networking/firewall/default.nix b/modules/desktop/networking/firewall/default.nix
new file mode 100644
index 0000000..074f398
--- /dev/null
+++ b/modules/desktop/networking/firewall/default.nix
@@ -0,0 +1,11 @@
+{
+ imports = [ ./fail2ban.nix ];
+
+ networking.firewall = {
+ enable = true;
+ allowPing = false;
+ logReversePathDrops = true;
+ logRefusedConnections = false;
+ checkReversePath = "loose";
+ };
+}