Remove unused large port hole in firewall

This commit is contained in:
Rodrigo Arias 2023-09-08 18:22:48 +02:00
parent 7ddd1977f3
commit ec9be9bb62

View File

@ -21,10 +21,6 @@
firewall = { firewall = {
enable = true; enable = true;
allowedTCPPorts = [ 22 ]; allowedTCPPorts = [ 22 ];
# FIXME: For slurmd as it requests the compute nodes to connect to us
#allowedTCPPortRanges = [ { from=1024; to=65535; } ];
extraCommands = '' extraCommands = ''
# Prevent ssfhead from contacting our slurmd daemon # Prevent ssfhead from contacting our slurmd daemon
iptables -A nixos-fw -p tcp -s ssfhead --dport 6817:6819 -j nixos-fw-log-refuse iptables -A nixos-fw -p tcp -s ssfhead --dport 6817:6819 -j nixos-fw-log-refuse