diff --git a/modules/server/nftables/default.nix b/modules/server/nftables/default.nix index 6293cfb..af32eec 100644 --- a/modules/server/nftables/default.nix +++ b/modules/server/nftables/default.nix @@ -15,7 +15,7 @@ in{ ct state established,related accept iifname "lo" accept tcp dport {22} accept - ${if cfg.database then ''tcp dport {5432, 6379} ip saddr { 10.0.0.0/8, 169.254.0.0/16 } accept'' else ""} + ${if cfg.db then ''tcp dport {5432, 6379} ip saddr { 10.0.0.0/8, 169.254.0.0/16 } accept'' else ""} ${if cfg.web then ''tcp dport {80, 443} accept udp dport {80, 443} accept'' else ""}