modules/system/networking/firewall/default.nix


1
2
3
4
5
6
7
8
9
10
11

{
  imports = [ ./fail2ban.nix ];

  networking.firewall = {
    enable = true;
    allowPing = false;
    logReversePathDrops = true;
    logRefusedConnections = false;
    checkReversePath = "loose";
  };
}