refactor: enable firewall explicitely for 'hecuba' host

2025-12-04 12:47:39 +01:00
parent 126671ffc7
commit 36cdaac5ad
1 changed files with 4 additions and 0 deletions
--- a/hosts/hecuba/default.nix
+++ b/hosts/hecuba/default.nix
@@ -44,6 +44,10 @@

  security.sudo.wheelNeedsPassword = false;

+  networking = {
+    firewall.enable = true;
+  };
+
  services.openssh = {
    enable = true;
    harden = true;