don't enable firewall by default
It is default ON in NixOS and will conflict with `firewall.enable = false`, which some user may intentionally set. In my opinion it is very high-level option to be set automatically. Also, people who really don't want firewall, just do `lib.mkForce false` and won't even notice that this module requires it.
This commit is contained in:
parent
42c4e18438
commit
c6e2de7180
|
@ -20,7 +20,6 @@
|
||||||
hostName = "${host_prefix}.${domain}";
|
hostName = "${host_prefix}.${domain}";
|
||||||
|
|
||||||
firewall = {
|
firewall = {
|
||||||
enable = true;
|
|
||||||
allowedTCPPorts = [ 25 587 ]
|
allowedTCPPorts = [ 25 587 ]
|
||||||
++ (if enable_imap then [ 143 ] else [])
|
++ (if enable_imap then [ 143 ] else [])
|
||||||
++ (if enable_pop3 then [ 110 ] else []);
|
++ (if enable_pop3 then [ 110 ] else []);
|
||||||
|
|
Loading…
Reference in New Issue