treewide: migrate to nftables
Martin Weinelt committed
Aug 27, 2025 at 14:24 UTC
65db10e0f24373f51231c3f0a6c2161a0549bb84
2 files changed
+3
build/common.nix
+1
@@ -79,6 +79,7 @@
79
# we use networkd
80
networking.useDHCP = false;
81
82
+ networking.nftables.enable = true;
83
networking.firewall = {
84
enable = true;
85
non-critical-infra/modules/common.nix
+2
@@ -10,6 +10,8 @@
10
11
environment.systemPackages = with pkgs; [ neovim ];
12
13
+ networking.nftables.enable = true;
14
+
15
security.acme.acceptTerms = true;
16
security.acme.defaults.email = "infra@nixos.org";
17
}