me
/
guix
Archived
1
0
Fork 0
This repository has been archived on 2024-08-07. You can view files and clone it, but cannot push or open issues/pull-requests.
guix/gnu/services
Tomas Volf 82f9e5ac97
services: nftables: Tighten the default rules.
Packets for local host IP ranges should be coming only over lo.  If that is
not the case, we should drop them.  Use iif for the check instead of iifname,
lo is guaranteed to exists, and iif is faster.

* gnu/services/networking.scm (%default-nftables-ruleset): Tighten the rules.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2023-10-20 00:33:26 +02:00
..
admin.scm services: file-database: Clarify 'excluded-directories' description. 2023-08-22 11:17:53 +02:00
audio.scm services: configuration: Add some commonly used predicates. 2023-10-07 12:41:06 -04:00
auditd.scm
authentication.scm services: Use more 'file-append'. 2023-08-15 23:30:44 +02:00
avahi.scm
base.scm services: static-networking: Add support for bonding. 2023-10-11 18:51:07 +02:00
certbot.scm
cgit.scm services: cgit: Allow file-like objects for ‘root-readme’. 2023-09-09 15:54:37 +02:00
ci.scm
configuration.scm services: configuration: Add some commonly used predicates. 2023-10-07 12:41:06 -04:00
cuirass.scm services: cuirass: Add ‘log-expiry’ option for ‘remote-server’. 2023-10-12 22:14:34 +02:00
cups.scm
databases.scm services: posgresql: Add option to specify UID/GID for postgres user. 2023-08-16 22:37:52 +02:00
dbus.scm
desktop.scm Merge remote-tracking branch 'origin/master' into kde-updates 2023-08-17 18:38:23 +08:00
dict.scm home: services: Add dicod. 2023-08-20 22:48:47 +02:00
dns.scm Revert "services: Add ddclient service." 2023-08-16 23:13:55 +02:00
docker.scm file-systems: Use cgroups v2. 2023-08-08 18:01:55 +02:00
file-sharing.scm
games.scm
ganeti.scm
getmail.scm
guix.scm services: bffe: Use guile from the package. 2023-09-15 11:10:43 +01:00
herd.scm
hurd.scm
kerberos.scm services: Use more 'file-append'. 2023-08-15 23:30:44 +02:00
ldap.scm
lightdm.scm
linux.scm services: fstrim-service-type: Serialize with SRFI-171 transducers. 2023-10-07 12:41:05 -04:00
lirc.scm
mail.scm
mcron.scm services: mcron: Hide ‘mkdir-p’ from (shepherd support). 2023-10-05 23:14:55 +02:00
messaging.scm
monitoring.scm
networking.scm services: nftables: Tighten the default rules. 2023-10-20 00:33:26 +02:00
nfs.scm
nix.scm
pam-mount.scm services: Use more 'file-append'. 2023-08-15 23:30:44 +02:00
pm.scm
rsync.scm
samba.scm
science.scm
sddm.scm services: sddm: Set some environment variables for the breeze theme. 2023-08-02 22:27:43 +08:00
security-token.scm
security.scm
shepherd.scm
sound.scm
spice.scm
ssh.scm
syncthing.scm services: syncthing: Ensure that service runs after mounting home directories. 2023-09-17 15:31:03 +02:00
sysctl.scm
telephony.scm services: configuration: Add some commonly used predicates. 2023-10-07 12:41:06 -04:00
version-control.scm
virtualization.scm services: hurd-vm: Leave root password uninitialized when offloading. 2023-10-05 23:14:55 +02:00
vnc.scm
vpn.scm services: vpn: Fix broken format string for wireguard dns. 2023-09-09 12:24:12 +02:00
web.scm
xorg.scm