From 79af7fa4929329f26fe2d50ddc732032da40277c Mon Sep 17 00:00:00 2001
From: Haak Saxberg <haak.erling@gmail.com>
Date: Sat, 30 Jul 2022 15:13:23 -0700
Subject: [PATCH] some firewall changes for the NAS

---
 nix/system/nas-configuration.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nix/system/nas-configuration.nix b/nix/system/nas-configuration.nix
index 9fa64af..83f83ae 100644
--- a/nix/system/nas-configuration.nix
+++ b/nix/system/nas-configuration.nix
@@ -150,6 +150,7 @@
   # VPN setup
   services.mullvad-vpn.enable = true;
   networking.wireguard.enable = true;
+  networking.firewall.checkReversePath = "loose";
 
   # Some programs need SUID wrappers, can be configured further or are
   # started in user sessions.
@@ -168,7 +169,6 @@
 
   services.plex = {
     enable = true;
-    openFirewall = true;
     user = "haak";
     group = "users";
   };