Move host firewall configs into host dirs

2026-05-30 11:24:56 +03:00
parent 8dada68767
commit 9b66b72729
4 changed files with 5 additions and 2 deletions
@@ -5,7 +5,7 @@
    ../../modules/base.nix
    ../../modules/docker.nix
    ../../modules/libvirtd.nix
-    ../../modules/firewall.nix
+    ./firewall.nix
    ./hardware.nix
  ];

@@ -0,0 +1,25 @@
+{
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      22 # SSH
+      139 # Samba (NetBIOS session)
+      445 # Samba (SMB)
+      2222 # Gitea SSH
+      3002
+      4567
+      5432 # PostgreSQL
+      7080
+      8081
+      8384 # Syncthing web UI
+      22000 # Syncthing data transfer
+    ];
+    allowedUDPPorts = [
+      137 # Samba (NetBIOS name)
+      138 # Samba (NetBIOS datagram)
+      9993 # ZeroTier
+      21027 # Syncthing discovery
+      22000 # Syncthing data transfer
+    ];
+  };
+}