ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

disable opensnitch for now need to work on rules for it

Browse source
This commit is contained in:
RingOfStorms (Joshua Bell) 2025-10-17 10:16:25 -05:00
parent d62189c566
commit 9b31ad8487
5 changed files with 65 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

14
common/general/default.nix
View file

@ -65,10 +65,24 @@ in
networking = {
hostName = top_cfg.systemName;
nftables.enable = true;
# Clears firewall rules on reboot, only ones set in config will be remade
nftables.flushRuleset = true;
firewall.enable = true;
};
# services.opensnitch = {
# enable = true;
# settings = {
# Firewall = if config.networking.nftables.enable then "nftables" else "iptables";
# InterceptUknown = true;
# ProcMonitorMethod = "ebpf";
# DefaultAction = "deny";
# };
# rules = {
#
# };
# };
# Enable flakes
nix.settings.experimental-features = lib.mkIf cfg.flakeOptions [
"nix-command"