m 1 gum: disable ipv6, open up fw
This commit is contained in:
parent
222d959ee4
commit
525dff002e
|
@ -16,7 +16,6 @@ in {
|
||||||
|
|
||||||
krebs.build.target = "root@gum.krebsco.de";
|
krebs.build.target = "root@gum.krebsco.de";
|
||||||
krebs.build.host = config.krebs.hosts.gum;
|
krebs.build.host = config.krebs.hosts.gum;
|
||||||
|
|
||||||
# Chat
|
# Chat
|
||||||
environment.systemPackages = with pkgs;[
|
environment.systemPackages = with pkgs;[
|
||||||
weechat
|
weechat
|
||||||
|
@ -33,9 +32,12 @@ in {
|
||||||
services.udev.extraRules = ''
|
services.udev.extraRules = ''
|
||||||
SUBSYSTEM=="net", ATTR{address}=="c8:0a:a9:c8:ee:dd", NAME="et0"
|
SUBSYSTEM=="net", ATTR{address}=="c8:0a:a9:c8:ee:dd", NAME="et0"
|
||||||
'';
|
'';
|
||||||
|
boot.kernelParams = [ "ipv6.disable=1" ];
|
||||||
networking = {
|
networking = {
|
||||||
|
enableIPv6 = false;
|
||||||
firewall = {
|
firewall = {
|
||||||
allowPing = true;
|
allowPing = true;
|
||||||
|
logRefusedConnections = false;
|
||||||
allowedTCPPorts = [
|
allowedTCPPorts = [
|
||||||
# smtp
|
# smtp
|
||||||
25
|
25
|
||||||
|
|
Loading…
Reference in a new issue