initial config

2026-04-20 15:08:47 +00:00
commit 8f4daf76b8
27 changed files with 1458 additions and 0 deletions
--- a/modules/system/firewall.nix
+++ b/modules/system/firewall.nix
@@ -0,0 +1,13 @@
+# ==========================================
+# FIREWALL CONFIGURATION
+# ==========================================
+{ config, pkgs, ... }:
+
+{
+  # UFW-style firewall — deny all inbound by default
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ ];
+    allowedUDPPorts = [ ];
+  };
+}