139 current 2025-10-08 23:18:59 25.05.20251006.20c4598 6.12.50 *
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
# flake for blakes nixos config
|
||||
# define new devices in outputs
|
||||
# generation: 138 current 2025-10-08 23:11:11 25.05.20251006.20c4598 6.12.50 *
|
||||
# generation: 139 current 2025-10-08 23:18:59 25.05.20251006.20c4598 6.12.50 *
|
||||
{
|
||||
description = "blakes nix config";
|
||||
inputs = {
|
||||
|
||||
@@ -59,14 +59,17 @@ in
|
||||
};
|
||||
};
|
||||
|
||||
# networking.firewall.extraCommands = ''
|
||||
# iptables -N QBIT
|
||||
# iptables -A OUTPUT -m owner --uid-owner ${toString ids} -j QBIT
|
||||
# iptables -A QBIT -o ${vpn_inf} -j ACCEPT
|
||||
# iptables -A QBIT -p tcp -d 127.0.0.1 --dport ${toString cfg.port} -j ACCEPT
|
||||
# iptables -A QBIT -p tcp -o enp89s0 -d 10.0.0.0/8 --dport ${toString cfg.port} -j ACCEPT
|
||||
# iptables -A QBIT -j DROP
|
||||
# '';
|
||||
networking.firewall.extraCommands = ''
|
||||
iptables -F QBIT
|
||||
iptables -X QBIT
|
||||
iptables -N QBIT
|
||||
iptables -N QBIT
|
||||
iptables -A OUTPUT -m owner --uid-owner ${toString ids} -j QBIT
|
||||
iptables -A QBIT -o ${vpn_inf} -j ACCEPT
|
||||
iptables -A QBIT -p tcp -d 127.0.0.1 --dport ${toString cfg.port} -j ACCEPT
|
||||
iptables -A QBIT -p tcp -o enp89s0 -d 10.0.0.0/8 --dport ${toString cfg.port} -j ACCEPT
|
||||
iptables -A QBIT -j DROP
|
||||
'';
|
||||
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user