Refactor firewall configuration with comments

2019-11-11 03:29:00 +01:00 · 2019-11-11 03:29:00 +01:00 · fecb1956f2
parent c154af8f83
commit fecb1956f2
1 changed files with 8 additions and 1 deletions
--- a/modules/networking.nix
+++ b/modules/networking.nix
@ -16,7 +16,14 @@

  # Firewall configuration
  networking.firewall = {
-    allowedTCPPorts = [ 631 6566 22067 8384 80 443 ];
+    allowedTCPPorts = [
+      631 # Cups
+      6566 # SANE
+      22067 # Syncthing relay
+      8384 # Syncthing GUI
+      80
+      443
+    ];
    autoLoadConntrackHelpers = true;
    connectionTrackingModules = [ "sane" ];
  };