talexander/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Releases Activity

nixos/netbird: openFirewall for remote DNS resolver

Browse Source
This commit is contained in:
Krzysztof Nazarewski 2025-06-26 11:55:00 +02:00
parent fdc7bb0f4f
commit 70e91e0956
No known key found for this signature in database
GPG Key ID: 985C1ACE088CC9F4
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
nixos/modules/services/networking/netbird.nix
View File

@ -12,6 +12,7 @@ let
escapeShellArgs escapeShellArgs
filterAttrs filterAttrs
getExe getExe
listToAttrs
literalExpression literalExpression
maintainers maintainers
makeBinPath makeBinPath
@ -471,6 +472,16 @@ in
toClientList (client: optional client.openFirewall client.port) toClientList (client: optional client.openFirewall client.port)
); );
# Ports opened on a specific
networking.firewall.interfaces = listToAttrs (
toClientList (client: {
name = client.interface;
value.allowedUDPPorts = optionals client.openFirewall [
5353 # required for the DNS forwarding/routing to work
];
})
);
systemd.network.networks = mkIf config.networking.useNetworkd ( systemd.network.networks = mkIf config.networking.useNetworkd (
toClientAttrs ( toClientAttrs (
client: client: