nix-configs

commit 67d4705bb60f9b3f297c7ec677b5cd5479ea07e2
parent 735688a1f8a7a330305429be4674dee2ac882b54
Author: breadcat <breadcat@users.noreply.github.com>
Date:   Sun, 24 Aug 2025 12:49:02 +0100

Move NFS firewall to common

Diffstat:
M
common/nfs-server.nix
 | 
14
+++++++++-----
M
machines/ilias.nix
 | 
5
-----

2 files changed, 9 insertions(+), 10 deletions(-)
diff --git a/common/nfs-server.nix b/common/nfs-server.nix
@@ -1,8 +1,12 @@
 {
-    services.nfs.server = {
-      enable = true;
-      exports = ''
-        /tank    192.168.1.0/24(rw)
-      '';
+  services.nfs.server = {
+    enable = true;
+    exports = ''
+      /tank    192.168.1.0/24(rw)
+    '';
+  };
+  networking.firewall = {
+      allowedTCPPorts = [ 111 2049 ];
+      allowedUDPPorts = [ 111 2049 ];
     };
 }
diff --git a/machines/ilias.nix b/machines/ilias.nix
@@ -82,11 +82,6 @@ in {
       ];
     };
   };
-  # Firewall and NFS server ports
-  networking.firewall.enable = true;
-  networking.firewall.allowPing = true;
-  networking.firewall.allowedTCPPorts = [111 2049];
-  networking.firewall.allowedUDPPorts = [111 2049];
 
   # Packages
   environment.systemPackages = with pkgs; [