ambroisie/nix-config
ambroisie/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

services: adblock: restrict to wireguard interface

Browse source
This commit is contained in:
Bruno BELANYI 2021-04-22 17:40:27 +00:00
parent a551ace6a6
commit 3696471201
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
services/adblock.nix
View file

@ -36,9 +36,11 @@ in
};
config = lib.mkIf cfg.enable {
# Needed when connecting from Wireguard clients
networking.firewall.allowedUDPPorts = [ 53 ];
networking.firewall.allowedTCPPorts = [ 53 ];
# Allow wireguard clients to connect to it
networking.firewall.interfaces."${wgCfg.iface}" = {
allowedUDPPorts = [ 53 ];
allowedTCPPorts = [ 53 ];
};
services.unbound = {
enable = true;