adds allowedTCPPorts for local network access in docker0 interface

2024-11-16 01:35:44 +01:00
parent 09ad59d3c5
commit 7d64801ae2
1 changed files with 13 additions and 3 deletions
--- a/config/nixos/common/server.nix
+++ b/config/nixos/common/server.nix
@ -23,14 +23,24 @@
      400 # SSH
      80 # HTTP
      443 # HTTPS
+
      22 # Git over SSH
      32400 # Plex
-
-      7788 # Sabnzbd
-      8085 # Qbittorrent
    ];
    allowedUDPPorts = [
      51820 # WireGuard
    ];
  };
+
+  # Allow local network access only
+  interfaces = {
+    "docker0" = {
+      allowedTCPPorts = [
+        7788 # Sabnzbd
+        8085 # Qbittorrent
+        81 # Nginx Proxy Manager
+        3030 # Gitea
+      ];
+    };
+  };
 }