forked from
lass.pds.lassul.us/superconfig
This repository has no description
flix: simplify firewall stuff
author
lassulus
date
(May 12, 2024, 10:26 PM CEST)
commit
fd0e95f3
fd0e95f3b13c3a72f6699b1fa2a99f659f1626a9
parent
eaec5611
eaec561159ee0062ce34e7114a3d733c4b9bc7f8
+8
-15
+8
-15
2configs/services/flix/default.nix
+8
-15
2configs/services/flix/default.nix
···
193
193
workgroup = WORKGROUP
194
194
server string = ${config.networking.hostName}
195
195
# only allow retiolum addresses
196
-
hosts allow = 42::/16 10.243.0.0/16 10.244.0.0/16
196
+
hosts allow = 42::/16 10.243.0.0/16 10.244.0.0/16 fdcc:c5da:5295:c853:d499::/80
197
197
198
198
# Use sendfile() for performance gain
199
199
use sendfile = true
···
273
273
{ predicate = "-p tcp --dport 6767"; target = "ACCEPT"; } # bazarr
274
274
275
275
# smbd
276
-
{ predicate = "-i retiolum -p tcp --dport 445"; target = "ACCEPT"; }
277
-
{ predicate = "-i retiolum -p tcp --dport 111"; target = "ACCEPT"; }
278
-
{ predicate = "-i retiolum -p udp --dport 111"; target = "ACCEPT"; }
279
-
{ predicate = "-i retiolum -p tcp --dport 2049"; target = "ACCEPT"; }
280
-
{ predicate = "-i retiolum -p udp --dport 2049"; target = "ACCEPT"; }
281
-
{ predicate = "-i retiolum -p tcp --dport 4000:4002"; target = "ACCEPT"; }
282
-
{ predicate = "-i retiolum -p udp --dport 4000:4002"; target = "ACCEPT"; }
283
-
{ predicate = "-i wiregrill -p tcp --dport 445"; target = "ACCEPT"; }
284
-
{ predicate = "-i wiregrill -p tcp --dport 111"; target = "ACCEPT"; }
285
-
{ predicate = "-i wiregrill -p udp --dport 111"; target = "ACCEPT"; }
286
-
{ predicate = "-i wiregrill -p tcp --dport 2049"; target = "ACCEPT"; }
287
-
{ predicate = "-i wiregrill -p udp --dport 2049"; target = "ACCEPT"; }
288
-
{ predicate = "-i wiregrill -p tcp --dport 4000:4002"; target = "ACCEPT"; }
289
-
{ predicate = "-i wiregrill -p udp --dport 4000:4002"; target = "ACCEPT"; }
276
+
{ predicate = "-p tcp --dport 445"; target = "ACCEPT"; }
277
+
{ predicate = "-p tcp --dport 111"; target = "ACCEPT"; }
278
+
{ predicate = "-p udp --dport 111"; target = "ACCEPT"; }
279
+
{ predicate = "-p tcp --dport 2049"; target = "ACCEPT"; }
280
+
{ predicate = "-p udp --dport 2049"; target = "ACCEPT"; }
281
+
{ predicate = "-p tcp --dport 4000:4002"; target = "ACCEPT"; }
282
+
{ predicate = "-p udp --dport 4000:4002"; target = "ACCEPT"; }
290
283
];
291
284
292
285
tables.nat.PREROUTING.rules = [