| 26 May 2026 |
 hexa | can I get the default nixos firewall rules with nft? | 10:11:28 |
| hexa | because toggling networking.nftable.enable will probably ship me an empty ruleset | 10:11:46 |
 mib 🥐 | w.r.t. default, do you mean the ones that manage e.g. networking.firewall.allowed*Ports? | 10:12:21 |
| hexa | I mean the default chains | 10:12:40 |
| mib 🥐 | then yes. fairly certain it "ships" with those. | 10:12:55 |
| hexa | ok | 10:13:02 |
| hexa | wondering where to put shared declarations | 10:15:44 |
| hexa | like subnet definitions | 10:15:59 |
| hexa | 
Download | 10:16:17 |
| hexa | because … yeah. please not per chain | 10:16:24 |
| hexa | rather per table | 10:16:38 |
| hexa | but the template does not support that … sigh | 10:22:24 |
| hexa | am I rolling my own again? | 10:23:20 |
| hexa | spoilers | 10:32:48 |
| hexa | no I am not | 10:32:49 |
| hexa | https://github.com/NixOS/nixpkgs/pull/524405 | 10:33:23 |
| hexa | anywho wants to speed-run a review? | 10:34:27 |
| hexa | I'm also willing to bikeshed the option name, if anyone here is into that | 10:39:35 |
| hexa | Redacted or Malformed Event | 10:39:48 |
| hexa | huh, in nixos/infra we use | 10:45:25 |
| hexa | tables."nixos-fw".content = lib.mkBefore ''
| 10:45:27 |
| hexa | I guess that also works but is slightly less discoverable | 10:45:45 |
| hexa | dbfb853 Martin Weinelt 2025-09-21 17:15 +0200 9│ tables."nixos-fw".content = lib.mkBefore ''
| 10:45:57 |
| hexa | and of course I don't remember doing that anymore … sigh | 10:46:23 |
| hexa | so probably still a worthwhile change | 10:46:55 |
| mib 🥐 | maybe this is a matter of documentation then? | 16:18:01 |
 Tom | Anyone interested in reviewing a bird update? https://github.com/NixOS/nixpkgs/pull/524024 | 18:33:27 |
| 27 May 2026 |
|  isabel changed their profile picture. | 21:17:11 |
| 29 May 2026 |
|  lassulus changed their profile picture. | 07:07:21 |
 Eli Saado | is anyone aware of networking.firewall.* options that only apply to one address family? e.g. networking.firewall.allowedTCPPorts for v6 only? | 20:05:43 |
