Fix override.

This commit is contained in:
2025-11-21 16:43:39 +00:00
parent a92f0fcb28
commit 6100d8dc69

View File

@@ -27,7 +27,7 @@
# Security hardening: Enable firewall (override global setting)
networking.firewall = {
enable = true;
enable = lib.mkForce true;
allowedTCPPorts = [ 80 443 ]; # Public web traffic only
allowedUDPPorts = [ 41641 ]; # Tailscale
trustedInterfaces = [ "tailscale0" ]; # Full access via VPN