1 files changed, 10 insertions, 2 deletions
diff --git a/machines/kusanagi/desktop.nix b/machines/kusanagi/desktop.nix
index c865844..8e1eb8c 100644
--- a/machines/kusanagi/desktop.nix
+++ b/machines/kusanagi/desktop.nix
@@ -22,11 +22,19 @@
     drivers = with pkgs; [ gutenprint ];
   };
 
-  # mDNS: printer discovery, and resolves kusanagi's *.local NAS names.
+  # mDNS: publish kusanagi.local and resolve *.local LAN names.
+  # Keep the firewall opening scoped to the Wi-Fi LAN interface.
+  networking.firewall.interfaces.wlp8s0.allowedUDPPorts = [ 5353 ];
   services.avahi = {
     enable = true;
     nssmdns4 = true;
-    openFirewall = true;
+    openFirewall = false;
+    allowInterfaces = [ "wlp8s0" ];
+    publish = {
+      enable = true;
+      addresses = true;
+      workstation = true;
+    };
   };
 
   # prevent auto-mounting optical disks