Open RafaelKr opened 1 month ago
I thought this was the default for all "official" nixos configuration. I just picked some random examples from search.nixos.org
firewallFilter
and firewallRules
options, but those seems to be only used by services.promethues.exporters.*
This seems to confirm my gut feeling: If you just want to open the firewall to everyone you can use that option, otherwise you have to configure your firewall on your own. I think this makes sense, because the flake author can not know whether the system uses iptables, nftables or other higher level firewall systems.
I too have special firewall configuration in my setup via networking.firewall.extraCommands
.
Do you have an example of other modules or flakes that have a more advanced firewall configuration option?
With the current openFirewall configuration Port 6556 is opened for everyone. So you can call
telnet <IP> 6556
from any other device to see all Monitoring information.I used the following configuration (for nftables) instead: