fix: re add firewall configuration

2026-02-04 21:28:38 -08:00
parent a42e02514e
commit 508d5a3525
1 changed files with 4 additions and 3 deletions
--- a/nix/modules/networking/wireguard-mesh.nix
+++ b/nix/modules/networking/wireguard-mesh.nix
@@ -65,9 +65,10 @@ in
      };
    };

-    # networking.firewall = {
-    #   allowedUDPPorts = [ 51820 ];
-    # };
+    networking.firewall = {
+      allowedUDPPorts = [ 51820 ];
+      trustedInterfaces = [ "wg0" ];
+    };

    systemd.tmpfiles.rules = [
      "d /etc/wireguard 0700 root root -"