Move kernel config to its own role.

2026-05-31 02:03:49 -04:00
parent 0fa170c57e
commit 49f75408ae
8 changed files with 214 additions and 66 deletions
--- a/nix/configuration/roles/firewall/default.nix
+++ b/nix/configuration/roles/firewall/default.nix
@@ -24,7 +24,16 @@
    networking.firewall.allowedUDPPorts = [
      5353 # mDNS
    ];
+
+    # networking.firewall.enable = true;
+    # networking.nftables.enable = true;
+
    # Or disable the firewall altogether.
-    # networking.firewall.enable = false;
+    networking.firewall.enable = false;
+
+    # Debugging
+    # networking.firewall.logRefusedConnections = true;
+    # networking.firewall.logRefusedPackets = true;
+    # networking.firewall.logReversePathDrops = true;
  };
 }