summaryrefslogtreecommitdiff
path: root/modules/networking/firewall/default.nix
diff options
context:
space:
mode:
authorFuwn <[email protected]>2024-09-11 03:34:29 -0700
committerFuwn <[email protected]>2024-09-11 03:34:39 -0700
commitb84cc156236ecd4fbe0c9d458e46078df625cb47 (patch)
tree18d5355ef83ebe992074a5cbff14f393b8481b67 /modules/networking/firewall/default.nix
parentBump: i2p (diff)
downloadnixos-config-b84cc156236ecd4fbe0c9d458e46078df625cb47.tar.xz
nixos-config-b84cc156236ecd4fbe0c9d458e46078df625cb47.zip
Bump: move networking module
Diffstat (limited to 'modules/networking/firewall/default.nix')
-rw-r--r--modules/networking/firewall/default.nix11
1 files changed, 11 insertions, 0 deletions
diff --git a/modules/networking/firewall/default.nix b/modules/networking/firewall/default.nix
new file mode 100644
index 0000000..074f398
--- /dev/null
+++ b/modules/networking/firewall/default.nix
@@ -0,0 +1,11 @@
+{
+ imports = [ ./fail2ban.nix ];
+
+ networking.firewall = {
+ enable = true;
+ allowPing = false;
+ logReversePathDrops = true;
+ logRefusedConnections = false;
+ checkReversePath = "loose";
+ };
+}