fix: remove invalid networking.firewall.defaultAllow option

2026-05-01 03:52:57 +00:00
parent 65fa778b2b
commit 9b1f467db9
1 changed files with 1 additions and 1 deletions
--- a/hosts/lazyworkhorse/configuration.nix
+++ b/hosts/lazyworkhorse/configuration.nix
@@ -314,9 +314,9 @@
  
  # Firewall - default deny, explicit allow
  networking.firewall = {
+    # Enable firewall with default deny policy (NixOS firewall denies all by default)
    enable = true;
    allowPing = true;
-    defaultAllow = false;
    
    # Only essential ports exposed to internet
    allowedTCPPorts = [