ada: upstream

Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-02-08 22:27:39 +03:00 · 2026-02-08 22:27:39 +03:00 · a50ae76a23
commit a50ae76a23
parent e3e1612691
74 changed files with 130 additions and 387 deletions
--- a/ada/networking/firewall.nix
+++ b/ada/networking/firewall.nix
@ -1,30 +1,14 @@
-{...}: {
+_: {
  networking = {
    firewall = {
      allowPing = true;
-      enable = true;
+      enable = false;
      checkReversePath = false;
+    };

-      interfaces = {
-        eno1 = rec {
-          allowedTCPPortRanges = [
-            {
-              from = 1714;
-              to = 1764;
-            }
-          ];
-
-          allowedUDPPortRanges = allowedTCPPortRanges;
-        };
-
-        salt-hand7s-pc = rec {
-          allowedTCPPorts = [
-            6567
-          ];
-
-          allowedUDPPorts = allowedTCPPorts;
-        };
-      };
+    nftables = {
+      enable = true;
+      flattenRulesetFile = true;
    };
  };
 }