Fix override.
This commit is contained in:
@@ -27,7 +27,7 @@
|
||||
|
||||
# Security hardening: Enable firewall (override global setting)
|
||||
networking.firewall = {
|
||||
enable = true;
|
||||
enable = lib.mkForce true;
|
||||
allowedTCPPorts = [ 80 443 ]; # Public web traffic only
|
||||
allowedUDPPorts = [ 41641 ]; # Tailscale
|
||||
trustedInterfaces = [ "tailscale0" ]; # Full access via VPN
|
||||
|
||||
Reference in New Issue
Block a user