roles/syncthingserver: don't allow HTTP(s/3) traffic on all interfaces

2025-08-04 22:58:35 -07:00
parent e04b8251c7
commit 231ea44d7c
1 changed files with 0 additions and 3 deletions
--- a/roles/syncthingserver.nix
+++ b/roles/syncthingserver.nix
@@ -86,13 +86,10 @@ in
    services.tailscale.permitCertUid = "traefik";

    networking.firewall.allowedTCPPorts = [
-      80
-      443
      config.services.syncthing.relay.port
    ];

    networking.firewall.allowedUDPPorts = [
-      443
      22000
      21027
    ];