diff --git a/flake.nix b/flake.nix index 215818c..ab82480 100644 --- a/flake.nix +++ b/flake.nix @@ -86,7 +86,6 @@ ./services/coturn.nix ./services/wireguard-outer.nix ./services/borgbackup-vps.nix - ./services/syncthing-relay.nix ]; }; diff --git a/hosts/homeserver/configuration.nix b/hosts/homeserver/configuration.nix index 3e084ee..72f8bc7 100644 --- a/hosts/homeserver/configuration.nix +++ b/hosts/homeserver/configuration.nix @@ -43,7 +43,7 @@ allowedTCPPorts = [ ]; interfaces."enp34s0".allowedTCPPorts = [ ]; extraInputRules = '' - ip saddr {192.168.1.0/24, 10.10.0.0/24} tcp dport {22, 8096, 8920, 3000, 8282, 9696, 8989, 7878, 80} accept + ip saddr 192.168.1.0/24 tcp dport {22, 8096, 8920, 3000, 8282, 9696, 8989, 7878, 80} accept tcp dport {22, 8096, 8920, 3000, 8282, 9696, 8989, 7878, 80} drop ip saddr 192.168.1.0/24 udp dport 5353 accept diff --git a/services/syncthing-relay.nix b/services/syncthing-relay.nix deleted file mode 100644 index 223c049..0000000 --- a/services/syncthing-relay.nix +++ /dev/null @@ -1,11 +0,0 @@ -{ ... }: - -{ - services.syncthing.relay = { - enable = true; - providedBy = "ellie"; - pools = []; # Don't join public relay pools - }; - - networking.firewall.allowedTCPPorts = [ 22067 ]; -}