gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

modules/nixos/katnet: Firewall handler

Browse source
This commit is contained in:
kat witch 2021-04-27 22:25:56 +01:00
parent ba57815abd
commit 874974c48a
No known key found for this signature in database
GPG key ID: 1B477797DCA5EC72
12 changed files with 186 additions and 184 deletions
Download patch file Download diff file Expand all files Collapse all files

42
hosts/samhain/nixos/default.nix
View file

@ -93,48 +93,6 @@ in {
networking.interfaces.enp34s0.useDHCP = true;
networking.firewall.allowPing = true;
services.nginx.appendConfig = ''
rtmp {
server {
listen [::]:1935 ipv6only=off;
application kattv {
live on;
allow publish all;
allow play all;
}
}
}
'';
networking.firewall.interfaces.enp34s0.allowedTCPPorts = [
80 # http
443 # https
];
networking.firewall.interfaces.hexnet.allowedTCPPorts = [
80 # http
443 # https
32101 # mpv
443 # https
111 # nfs
2049 # nfs
1935 # rtmp
];
networking.firewall.interfaces.enp34s0.allowedUDPPorts = [
4010 # scream
111 # nfs
2049 # nfs
];
networking.firewall.interfaces.hexnet.allowedUDPPorts = [ ];
networking.firewall.allowedUDPPortRanges = [{
from = 32768;
to = 60999;
}]; # dnla
services.avahi.enable = true;
hexchen.network = {