pumpkin: syncoid: setup service

[julm/julm-nix.git] / hosts / blackberry / networking.nix

diff --git a/hosts/blackberry/networking.nix b/hosts/blackberry/networking.nix
index b29bb5d3ae01d1f93777dfb1e7fe68df5816789b..9c835f228f91970006a09517aa073059c9aa80d9 100644 (file)
--- a/hosts/blackberry/networking.nix
+++ b/hosts/blackberry/networking.nix
@@ -1,4 +1,4 @@
-{ pkgs, lib, ... }:
+{ pkgs, lib, config, ... }:
 {
   imports = [
     ../../nixos/profiles/dnscrypt-proxy2.nix
@@ -28,6 +28,10 @@
   networking.nftables.ruleset = lib.mkAfter ''
     table inet filter {
       chain input {
+        ip daddr 10.0.0.0/8 counter goto input-lan
+        ip daddr 172.16.0.0/12 counter goto input-lan
+        ip daddr 192.168.0.0/16 counter goto input-lan
+        ip daddr 224.0.0.0/3 counter goto input-lan
         goto input-net
       }
       chain output {
@@ -56,4 +60,9 @@
   systemd.services.sshd.serviceConfig.LoadCredentialEncrypted = [
     "host.key:${ssh/host.key.cred}"
   ];
+
+  programs.wireshark = {
+    enable = true;
+    package = pkgs.wireshark-qt;
+  };
 }