From c91e78758a36badda84226f6670d43075614055e Mon Sep 17 00:00:00 2001 From: yokai Date: Tue, 4 Aug 2026 16:47:47 -0500 Subject: networking: allow ping on shared firewall Enable ICMP echo requests in the shared firewall so both kusanagi and enzo can be reached with ping without punching any additional service ports. Assisted-by: OpenAI:gpt-5 --- common/core.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/common/core.nix b/common/core.nix index 9e9ca7a..c06069a 100644 --- a/common/core.nix +++ b/common/core.nix @@ -18,6 +18,7 @@ # for tailscale; open only its discovery/connection UDP port and let the # normal host firewall rules apply to tailnet traffic too. + networking.firewall.allowPing = true; networking.firewall.allowedUDPPorts = [ 41641 ]; services.tailscale.enable = true; -- cgit v1.3