diff options
| -rw-r--r-- | machines/kusanagi/desktop.nix | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/machines/kusanagi/desktop.nix b/machines/kusanagi/desktop.nix index c865844..8e1eb8c 100644 --- a/machines/kusanagi/desktop.nix +++ b/machines/kusanagi/desktop.nix @@ -22,11 +22,19 @@ drivers = with pkgs; [ gutenprint ]; }; - # mDNS: printer discovery, and resolves kusanagi's *.local NAS names. + # mDNS: publish kusanagi.local and resolve *.local LAN names. + # Keep the firewall opening scoped to the Wi-Fi LAN interface. + networking.firewall.interfaces.wlp8s0.allowedUDPPorts = [ 5353 ]; services.avahi = { enable = true; nssmdns4 = true; - openFirewall = true; + openFirewall = false; + allowInterfaces = [ "wlp8s0" ]; + publish = { + enable = true; + addresses = true; + workstation = true; + }; }; # prevent auto-mounting optical disks |