nixos/podman: don't open ports for firewalld

2025-11-20 12:38:47 +08:00
parent 87882c1e3e
commit 3a7a4fb450
1 changed files with 3 additions and 1 deletions
@@ -249,7 +249,9 @@ in
      };

      # containers cannot reach aardvark-dns otherwise
-      networking.firewall.interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];
+      networking.firewall = lib.mkIf (config.networking.firewall.backend != "firewalld") {
+        interfaces.${network_interface}.allowedUDPPorts = lib.mkIf dns_enabled [ 53 ];
+      };

      virtualisation.containers = {
        enable = true; # Enable common /etc/containers configuration