nixos

commit 7206e069fb1be1c57f5290ac698b102d309580ed
parent 4812cc7a3f1926a74ff0eb202e202075c4499861
Author: Toni Brown <me@tb148.net>
Date:   Sun,  7 Dec 2025 18:11:17 +0800

Enable nftables firewall and log refused packets

Diffstat:
M
configuration.nix
 | 
3
++-

1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/configuration.nix b/configuration.nix
@@ -92,7 +92,8 @@
 
     networking.hostName = "nixosion";
     networking.networkmanager.enable = true;
-    networking.firewall.enable = false;
+    networking.nftables.enable = true;
+    networking.firewall.logRefusedPackets = true;
 
     services.mihomo = {
         enable = true;