This commit is contained in:
soraefir
2026-05-08 02:13:44 +02:00
parent 8a619d9fc6
commit 1a8eb085df

View File

@@ -22,11 +22,11 @@ in{
iifname "lo" accept
iifname { "podman*", "veth*" } accept
tcp dport {422, 22} accept
${if builtins.length DBallApps > 0 then ''tcp dport {5432, 6379} ip saddr { 10.0.0.0/8, 169.254.0.0/16 } accept'' else ""}
${if cfg.web then ''tcp dport {80, 443} accept
udp dport {80, 443} accept'' else ""}
${if cfg.wireguard then ''tcp dport {1515} accept
udp dport {1515} accept'' else ""}
${if builtins.length DBallApps > 0 then ''tcp dport {5432, 6379} accept'' else ""}
${if cfg.web then ''tcp dport {80, 443} accept'' else ""}
${if cfg.web then ''udp dport {80, 443} accept'' else ""}
${if cfg.wireguard then ''tcp dport {1515} accept'' else ""}
${if cfg.wireguard then ''udp dport {1515} accept'' else ""}
}