ooknet/nixos/modules/base/networking/firewall.nix

18 lines
271 B
Nix

{
lib,
config,
...
}: let
inherit (lib) mkIf;
host = config.ooknet.host;
in {
config = mkIf (host.type != "phone") {
networking.firewall = {
enable = true;
allowedTCPPorts = [
443 # https
57621 # spotify
];
};
};
}