summaryrefslogtreecommitdiffstats
path: root/hosts
diff options
context:
space:
mode:
authorTim Keller <tjk@tjkeller.xyz>2026-10-30 18:13:22 -0500
committerTim Keller <tjk@tjkeller.xyz>2026-10-30 18:13:22 -0500
commit97c0c32195ac617c3000b8bb2f0fcf4a5405a1c6 (patch)
tree1490f8633adf6a2a4223425e9f0835602c78aca0 /hosts
parent805992ac3af22a3d1de7c57a96861d322aa062b3 (diff)
downloadnixos-97c0c32195ac617c3000b8bb2f0fcf4a5405a1c6.tar.xz
nixos-97c0c32195ac617c3000b8bb2f0fcf4a5405a1c6.zip
consolidate nat rules
Diffstat (limited to 'hosts')
-rw-r--r--hosts/poweredge/networking.nix13
1 files changed, 2 insertions, 11 deletions
diff --git a/hosts/poweredge/networking.nix b/hosts/poweredge/networking.nix
index 790f009..8be3f4d 100644
--- a/hosts/poweredge/networking.nix
+++ b/hosts/poweredge/networking.nix
@@ -80,17 +80,8 @@ in { pkgs, config, ... }: {
wg1.configFile = "/run/secrets/wg1";
};
# NAT (port-forwarding) rules
- nat.forwardPorts =[
- { # Bitcoin p2p
- sourcePort = 8333;
- proto = "tcp";
- destination = "192.168.1.44:8333";
- }
- { # Filebrowser
- sourcePort = 19045;
- proto = "tcp";
- destination = "192.168.1.45:9000";
- }
+ nat.forwardPorts = [
+ { sourcePort = 8333; proto = "tcp"; destination = "192.168.1.44:8333"; } # Bitcoin p2p
];
firewall.allowedUDPPorts = [ 51820 ]; # Allow wg1 running on router host through w/o NAT
# Additional advanced rules