password/fw issue

systems/palatine-hill/firewall.nix

@@ -1,41 +1,54 @@
 { ... }:
 
 {
-  networking.firewall.allowedTCPPorts = [
-    # qbit
-    8081
-    8082
-    8443
+  networking.firewall = {
 
-    # hydra
-    3000
+    extraCommands = "
+      iptables -I nixos-fw 1 -i br+ -j ACCEPT
+    ";
 
-    # minio
-    8500
-    8501
+    extraStopCommands = "
+      iptables -D nixos-fw -i br+ -j ACCEPT
+    ";
 
-    # gitea
-    2222
-    2223
-    8088
+    trustedInterfaces = [ "br+" ];
 
-    # attic
-    8183
+    allowedTCPPorts = [
+      # qbit
+      8081
+      8082
+      8443
 
-    # collabora
-    9980
+      # hydra
+      3000
 
-    # arr
-    6767
-    9696
-    7878
-    8989
-    8686
-    8787
-    5055
+      # minio
+      8500
+      8501
 
-    # temp postgres
-    5432
-  ];
+      # gitea
+      2222
+      2223
+      8088
 
+      # attic
+      8183
+
+      # collabora
+      9980
+
+      # arr
+      6767
+      9696
+      7878
+      8989
+      8686
+      8787
+      5055
+
+      # temp postgres
+      5432
+    ];
+
+  };
 }