2026-05-03 09:11:58 +00:00
4 changed files with 323 additions and 2 deletions
--- a/hosts/lazyworkhorse/configuration.nix
+++ b/hosts/lazyworkhorse/configuration.nix
@@ -314,9 +314,9 @@
  
  # Firewall - default deny, explicit allow
  networking.firewall = {
+    # Enable firewall with default deny policy (NixOS firewall denies all by default)
    enable = true;
    allowPing = true;
-    defaultAllow = false;
    
    # Only essential ports exposed to internet
    allowedTCPPorts = [