From 22d1b1a7fd73967154dbf4277fe156ddd437b2c6 Mon Sep 17 00:00:00 2001 From: Ittihadyya Date: Sat, 21 Dec 2024 08:49:56 +0200 Subject: [PATCH] actually, this should fix it --- networking/firewall.mod.nix | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/networking/firewall.mod.nix b/networking/firewall.mod.nix index 3f43496..de93ce8 100644 --- a/networking/firewall.mod.nix +++ b/networking/firewall.mod.nix @@ -4,11 +4,8 @@ networking.firewall.enable = true; networking.nftables.enable = true; }) - ({lib, config, ...}: lib.mkIf ( - config.networking.hostName != "aspartame" # open ports for data collection on everything EXCEPT aspartame, as that would be stupid, considering it is literally public facing. TODO: set up prometheus authentication, perhaps with a certificate. -e - ) - { - networking.firewall = { + ({ + networking.firewall.interfaces.wg0 = { allowedTCPPorts = [ 6703 ];