sora/nixconfig
1
0
Fork 1
Code Issues 2 Pull Requests Actions Releases Activity

fix ssh

Browse Source
This commit is contained in:
soraefir
2026-05-08 01:21:56 +02:00
parent 6ad9a0b34c
commit 593514c100
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/server/nftables/default.nix
View File

@@ -14,7 +14,7 @@ in{
type filter hook input priority filter; policy drop; type filter hook input priority filter; policy drop;
ct state established,related accept ct state established,related accept
iifname "lo" accept iifname "lo" accept
tcp dport {22} accept tcp dport {422, 22} accept
${if builtins.length cfg.db > 0 then ''tcp dport {5432, 6379} ip saddr { 10.0.0.0/8, 169.254.0.0/16 } accept'' else ""} ${if builtins.length cfg.db > 0 then ''tcp dport {5432, 6379} ip saddr { 10.0.0.0/8, 169.254.0.0/16 } accept'' else ""}
${if cfg.web then ''tcp dport {80, 443} accept ${if cfg.web then ''tcp dport {80, 443} accept
udp dport {80, 443} accept'' else ""} udp dport {80, 443} accept'' else ""}