s0me1newithhand7s/reNixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

chore(ada): firewalld hardening

Browse source 
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
This commit is contained in:
s0me1newithhand7s 2026-05-29 00:14:49 +03:00
parent 7fce4f6999
commit ab9fff95a1
1 changed files with 14 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
ada/services/firewalld.nix
View file

@ -3,8 +3,21 @@ _: {
firewalld = { firewalld = {
enable = true; enable = true;
settings = {
IPv6_rpfilter = "strict";
CleanupModulesOnExit = true;
StrictForwardPorts = true;
logDenied = "off";
FlushAllOnReload = "yes";
ReloadPolicy = "DROP";
RFC3964_IPv4 = "yes";
NftablesCounters = "no";
NftablesTableOwner = "yes";
IndividualCalls = "no";
};
zones = { zones = {
"eno1" = { "wan" = {
interfaces = [ interfaces = [
"ens1" "ens1"
]; ];