voronind/nix
0
0
Fork 0
Code Issues 40 Pull requests Packages Projects Releases Wiki Activity

Network: Replace fw rules with full network access.

Browse source
This commit is contained in:
Dmitry Voronin 2024-12-13 10:56:42 +03:00
parent 301f08b899
commit 1069d65572
5 changed files with 15 additions and 55 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
host/x86_64-linux/dasha/Network.nix
View file

@ -1,17 +1,9 @@
{ ... }: {
networking = {
firewall.extraCommands = ''
# Ssh access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22143
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22143
# Syncthing.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 21027
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 21027
# Local access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48
'';
};
}

14
host/x86_64-linux/desktop/Network.nix
View file

@ -1,17 +1,9 @@
{ ... }: {
networking = {
firewall.extraCommands = ''
# Ssh access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22143
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22143
# Syncthing.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 21027
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 21027
# Local access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48
'';
};
}

14
host/x86_64-linux/laptop/Network.nix
View file

@ -1,17 +1,9 @@
{ ... }: {
networking = {
firewall.extraCommands = ''
# Ssh access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22143
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22143
# Syncthing.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 21027
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 21027
# Local access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48
'';
};
}

14
host/x86_64-linux/max/Network.nix
View file

@ -1,17 +1,9 @@
{ ... }: {
networking = {
firewall.extraCommands = ''
# Ssh access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22143
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22143
# Syncthing.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 21027
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 21027
# Local access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48
'';
};
}

14
host/x86_64-linux/pocket/Network.nix
View file

@ -1,17 +1,9 @@
{ ... }: {
networking = {
firewall.extraCommands = ''
# Ssh access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22143
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22143
# Syncthing.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p tcp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 22000
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8 -p udp --dport 21027
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p tcp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 22000
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48 -p udp --dport 21027
# Local access.
iptables -I INPUT -j ACCEPT -s 10.0.0.0/8
ip6tables -I INPUT -j ACCEPT -s fd09:8d46:0b26::/48
'';
};
}