talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Temporarily disable the firewall for debugging.

Browse Source
This commit is contained in:
Tom Alexander 2026-01-04 22:27:46 -05:00 committed by Tom Alexander
parent fb66651b69
commit 1161ab9404
Signed by: talexander
GPG Key ID: 36C99E8B3C39D85F
2 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nix/kubernetes/keys/scope.nix
View File

@ -259,6 +259,8 @@ makeScope newScope (
}; };
}; };
"policyEnforcementMode" = "never";
# TODO: Read and maybe apply https://docs.cilium.io/en/stable/operations/performance/tuning/ # TODO: Read and maybe apply https://docs.cilium.io/en/stable/operations/performance/tuning/
# --set hostFirewall.enabled=true # --set hostFirewall.enabled=true

8
nix/kubernetes/roles/firewall/default.nix
View File

@ -53,9 +53,9 @@
# Check logs for blocked connections: # Check logs for blocked connections:
# journalctl -k or dmesg # journalctl -k or dmesg
networking.nftables.tables."my-fw" = { # networking.nftables.tables."my-fw" = {
family = "inet"; # family = "inet";
content = (builtins.readFile ./files/my-fw.nft); # content = (builtins.readFile ./files/my-fw.nft);
}; # };
}; };
} }