modules/core/networking/firewall/default.nix


1
2
3
4
5
6
7
8
9
10

{
  imports = [ ./fail2ban.nix ];

  networking.firewall = {
    allowPing = false;
    logReversePathDrops = true;
    logRefusedConnections = false;
    checkReversePath = "loose";
  };
}