Fix override.
This commit is contained in:
@@ -27,7 +27,7 @@
|
|||||||
|
|
||||||
# Security hardening: Enable firewall (override global setting)
|
# Security hardening: Enable firewall (override global setting)
|
||||||
networking.firewall = {
|
networking.firewall = {
|
||||||
enable = true;
|
enable = lib.mkForce true;
|
||||||
allowedTCPPorts = [ 80 443 ]; # Public web traffic only
|
allowedTCPPorts = [ 80 443 ]; # Public web traffic only
|
||||||
allowedUDPPorts = [ 41641 ]; # Tailscale
|
allowedUDPPorts = [ 41641 ]; # Tailscale
|
||||||
trustedInterfaces = [ "tailscale0" ]; # Full access via VPN
|
trustedInterfaces = [ "tailscale0" ]; # Full access via VPN
|
||||||
|
|||||||
Reference in New Issue
Block a user