don't enable firewall by default

It is default ON in NixOS and will conflict with `firewall.enable = false`, which some user may intentionally set.
In my opinion it is very high-level option to be set automatically.

Also, people who really don't want firewall, just do `lib.mkForce false` and won't even notice that this module requires it.
This commit is contained in:
Danylo Hlynskyi 2017-08-31 14:42:14 +03:00 committed by GitHub
parent 42c4e18438
commit c6e2de7180

View file

@ -20,7 +20,6 @@
hostName = "${host_prefix}.${domain}"; hostName = "${host_prefix}.${domain}";
firewall = { firewall = {
enable = true;
allowedTCPPorts = [ 25 587 ] allowedTCPPorts = [ 25 587 ]
++ (if enable_imap then [ 143 ] else []) ++ (if enable_imap then [ 143 ] else [])
++ (if enable_pop3 then [ 110 ] else []); ++ (if enable_pop3 then [ 110 ] else []);