nixos/pihole-ftl: add openFirewallDNS ports

2025-07-11 17:19:58 +02:00
parent 1536ddeea9
commit 4883f43d36
1 changed files with 11 additions and 0 deletions
@@ -56,6 +56,12 @@ in
      example = "3";
    };

+    openFirewallDNS = mkOption {
+      type = types.bool;
+      default = false;
+      description = "Open ports in the firewall for pihole-FTL's DNS server.";
+    };
+
    openFirewallDHCP = mkOption {
      type = types.bool;
      default = false;
@@ -434,6 +440,11 @@ in
    };

    networking.firewall = lib.mkMerge [
+      (mkIf cfg.openFirewallDNS {
+        allowedUDPPorts = [ 53 ];
+        allowedTCPPorts = [ 53 ];
+      })
+
      (mkIf cfg.openFirewallDHCP {
        allowedUDPPorts = [ 67 ];
      })