nix_config/machines/cj/firewall.nix
Jacob Hinkle 34fe86060c Fixed IPV6 setup for CJ
Remember to add IPV4 addresses in pihole for subhosts. This is because their namecheap DNS entries point to the router, so will resolve to our external IP. For IPV6, the addresses point straight to the server, so no additional steps are needed.
2022-11-02 09:19:05 -04:00

22 lines
551 B
Nix

{
allowedTCPPorts = [
8384 22000 # syncthing
8080 8443 6789 8880 8843 27117 # unifi controller: https://help.ui.com/hc/en-us/articles/218506997-UniFi-Network-Required-Ports-Reference
8585 # pihole web
53 # pihole
#8123 # home-assistant
#3000 # gitea
8081 # vaultwarden
80 443 # reverse proxy
];
allowedUDPPorts = [
22000 21027 # syncthing
3478 5514 10001 1900 123 # unifi
53 # pihole
80 443 # reverse proxy
];
allowedUDPPortRanges = [
{ from = 5656; to = 5699; } # unifi
];
}