45 lines
744 B
Nix
45 lines
744 B
Nix
{
|
|
config,
|
|
lib,
|
|
inputs,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
networking.firewall = {
|
|
enable = true;
|
|
allowedTCPPorts = [
|
|
22
|
|
80
|
|
81
|
|
222
|
|
443
|
|
3000
|
|
3478
|
|
5335
|
|
7777
|
|
8443
|
|
9000
|
|
];
|
|
trustedInterfaces = [
|
|
"tailscale0"
|
|
"docker0"
|
|
];
|
|
allowedUDPPorts = [
|
|
config.services.tailscale.port
|
|
53
|
|
3478
|
|
5300
|
|
7777
|
|
8443
|
|
40000
|
|
];
|
|
extraCommands = ''
|
|
iptables -A PREROUTING -t nat -i eth0 -p TCP --dport 80 -j REDIRECT --to-port 8000
|
|
iptables -A PREROUTING -t nat -i eth0 -p TCP --dport 53 -j REDIRECT --to-port 5300
|
|
iptables -A PREROUTING -t nat -i eth0 -p UDP --dport 53 -j REDIRECT --to-port 5300
|
|
'';
|
|
};
|
|
|
|
}
|