feat: schizo networking
This commit is contained in:
parent
92bb3f929b
commit
c5898e58d0
5 changed files with 116 additions and 42 deletions
18
modules/system/os/networking/firewall.nix
Normal file
18
modules/system/os/networking/firewall.nix
Normal file
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}: let
|
||||
in {
|
||||
networking = {
|
||||
# use nftables over iptables
|
||||
nftables.enable = true;
|
||||
|
||||
firewall = {
|
||||
enable = true;
|
||||
allowPing = false;
|
||||
logReversePathDrops = true;
|
||||
};
|
||||
};
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue