saner firewall defaults

This commit is contained in:
notgne2 2022-01-10 14:58:33 -07:00
parent abc1ad3ae3
commit 620b4680d7
No known key found for this signature in database
GPG Key ID: BB661E172B42A7F8

View File

@ -87,7 +87,7 @@
# Use a firewall
networking.firewall.enable = lib.mkDefault true;
networking.firewall.allowedTCPPorts = [ 22 443 80 ];
networking.firewall.allowedTCPPorts = lib.mkDefault [ 22 ];
programs.fish.enable = lib.mkDefault true;
users.defaultUserShell = lib.mkOverride 900 pkgs.fish;