Open web ports on any interface and move to file where it is used

rhoriguchi · Sep 18, 2024 · 6014592 · 6014592
1 parent 35cd529
commit 6014592
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 11 deletions.
diff --git a/configuration/devices/headless/router/firewall.nix b/configuration/devices/headless/router/firewall.nix
@@ -7,17 +7,6 @@ let
   serverIp = "192.168.2.2";
 in {
   networking = {
-    firewall.interfaces = let rules = { allowedTCPPorts = [ 80 443 ]; };
-    in {
-      "${externalInterface}" = rules;
-
-      "${internalInterface}" = rules;
-      "${internalInterface}.1" = rules;
-      "${internalInterface}.2" = rules;
-      "${internalInterface}.3" = rules;
-      "${internalInterface}.100" = rules;
-    };
-
     nftables = {
       enable = true;
 

diff --git a/configuration/devices/headless/router/web-proxy.nix b/configuration/devices/headless/router/web-proxy.nix
@@ -42,4 +42,6 @@
       locations."/".proxyPass = "http://XXLPitu-Server.local:80";
     };
   };
+
+  networking.firewall.allowedTCPPorts = [ config.services.nginx.defaultHTTPListenPort 443 ];
 }