chore: firewall tweaks

This commit is contained in:
arcnmx 2024-01-25 09:36:46 -08:00
parent 1daeddb40e
commit ee53c89e40
3 changed files with 12 additions and 13 deletions

View file

@ -146,8 +146,13 @@ in {
]) ])
]; ];
networking.firewall.allowedTCPPorts = [ networking.firewall = {
389 636 interfaces.local.allowedTCPPorts = [
]; 389
];
allowedTCPPorts = [
636
];
};
}; };
} }

View file

@ -9,16 +9,10 @@
# * 32469 - Plex DLNA Server # * 32469 - Plex DLNA Server
# UDP: # UDP:
# * 1900 - DLNA # * 1900 - DLNA
# * 5353 - Bonjour / Avahi
# * 32410, 32412, 32413, 32414 - GDM Network Discovery # * 32410, 32412, 32413, 32414 - GDM Network Discovery
# Tautulli and Ombi will also be reverse proxied, presumably networking.firewall.interfaces.local = {
allowedTCPPorts = [32400 8324 32469];
networking.firewall = { allowedUDPPorts = [1900 32410 32412 32413 32414];
interfaces.local.allowedTCPPorts = [
32400
];
allowedTCPPorts = [8324 32469 8181 5000];
allowedUDPPorts = [1900 5353 32410 32412 32413 32414];
}; };
} }

View file

@ -27,7 +27,7 @@ in {
}; };
users.groups.${cfg.group} = {}; users.groups.${cfg.group} = {};
networking.firewall.allowedTCPPorts = [cfg.port]; networking.firewall.interfaces.local.allowedTCPPorts = [cfg.port];
services.syncplay = { services.syncplay = {
enable = true; enable = true;