From c6deea451af1af2fdf4aee7f1ed74209f312a9b3 Mon Sep 17 00:00:00 2001
From: Fuwn <contact@fuwn.me>
Date: Tue, 3 Sep 2024 01:52:03 -0700
Subject: modules

---
 modules/networking/firewall.nix | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 modules/networking/firewall.nix

(limited to 'modules/networking/firewall.nix')

diff --git a/modules/networking/firewall.nix b/modules/networking/firewall.nix
new file mode 100644
index 0000000..73bc44f
--- /dev/null
+++ b/modules/networking/firewall.nix
@@ -0,0 +1,18 @@
+{
+  networking.firewall = {
+    enable = true;
+    allowedUDPPorts = [ 53 ];
+
+    allowedTCPPorts = [
+      80
+      443
+    ];
+
+    allowedUDPPortRanges = [
+      {
+        from = 60000;
+        to = 61000;
+      }
+    ];
+  };
+}
-- 
cgit v1.2.3