my over complex system configurations
dotfiles.isabelroses.com/
nixos
nix
flake
dotfiles
linux
darwin/security/firewall: use updated options
+7
-6
+7
-6
modules/darwin/security/firewall.nix
+7
-6
modules/darwin/security/firewall.nix
···
1
1
{
2
-
system.defaults.alf = {
3
-
allowdownloadsignedenabled = 0;
4
-
allowsignedenabled = 1;
5
-
globalstate = 0;
6
-
loggingenabled = 0;
2
+
networking.applicationFirewall = {
3
+
enable = true;
4
+
blockAllIncoming = false;
5
+
6
+
allowSignedApp = false;
7
+
allowSigned = true;
7
8
8
9
# Apple menu > System Preferences > Security and firewall
9
10
# Drops incoming requests via ICMP such as ping requests. Default is 0.
10
-
stealthenabled = 1;
11
+
enableStealthMode = true;
11
12
};
12
13
}