82
Linux Firewalls: How to Actually Secure a Cloud Server (iptables, nftables, firewalld, ufw) (blog.hofstede.it)
submitted 3 months ago by to c/linux@lemmy.world
9 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 3 months ago* (1 child)

There are sensible defaults but it ultimately depends on what the module is doing and how you configure it.

https://github.com/NixOS/nixpkgs/blob/8c91a71d13451abc40eb9dae8910f972f979852f/nixos/modules/services/networking/firewall.nix

The beauty is that this, or your own custom modules, become a declarative and reproducible abstraction layer which (if properly written) lets you focus on the what rather than the how.

... You could also write a bunch of scripts, which is what I used to do before I joined the cult.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 3 months ago

    Nftables rulesets are reproducible and let you focus on what rather than how. I've tried nix some time ago, conceptually cool distro, but it requires a lot of time, time that can be used configuring emacs 😝.

  • permalink
  • fedilink
  • source
  • parent