open nftables & fixes

2025-08-02 01:05:50 +02:00 · 2025-08-02 01:05:50 +02:00 · 41a6ed984a
commit 41a6ed984a
parent f05ce3bca5
2 changed files with 20 additions and 13 deletions
--- a/shared/commons/nftables.nix
+++ b/shared/commons/nftables.nix
@ -73,6 +73,11 @@ in
                                tcp dport 587 accept
                            '' else ""}

+                            ${if lib.elem myName mapping.db.hosts then ''
+                                # DNS Secondary
+                                iifname mesh tcp dport 5432 accept
+                            '' else ""}
+
                            # Log anything else
                            ip protocol tcp counter log prefix "tcp.in.dropped: "
                            ip protocol udp counter log prefix "udp.in.dropped: "