modules/networking/firewall.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

{
  networking.firewall = {
    enable = true;
    allowedUDPPorts = [ 53 ];
    allowPing = false;

    allowedTCPPorts = [
      80
      443
    ];

    allowedUDPPortRanges = [
      {
        from = 60000;
        to = 61000;
      }
    ];
  };
}