ooknet/system/modules/networking/firewall/default.nix

18 lines
274 B
Nix

{ lib, config, ... }:
let
inherit (lib) mkIf;
host = config.systemModules.host;
in
{
config = mkIf (host.type != "phone") {
networking.firewall = {
enable = true;
allowedTCPPorts = [
443 # https
57621 # spotify
];
};
};
}