Merge pull request #268324 from Janik-Haag/nixos-firewall-tool

nixos/firewall: install nixos-firewall-tool for iptables by default
This commit is contained in:
Atemu 2023-11-20 23:23:24 +01:00 committed by GitHub
commit cfe0155154
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 3 additions and 0 deletions

View File

@ -428,6 +428,8 @@
- `zfs` was updated from 2.1.x to 2.2.0, [enabling newer kernel support and adding new features](https://github.com/openzfs/zfs/releases/tag/zfs-2.2.0).
- The iptables firewall module now installs the `nixos-firewall-tool` which allows the user to easily temporarily open ports through the firewall.
- Elixir now defaults to version
[v1.15](https://elixir-lang.org/blog/2023/06/19/elixir-v1-15-0-released/).

View File

@ -301,6 +301,7 @@ in
}
];
environment.systemPackages = [ pkgs.nixos-firewall-tool ];
networking.firewall.checkReversePath = mkIf (!kernelHasRPFilter) (mkDefault false);
systemd.services.firewall = {