2
0

Move extraRules to the end of the recursiveUpdate

extraRules is the user-specified ruleset so this allows the
user configuration to override the builtin rules.
This commit is contained in:
Peter Collingbourne
2026-05-02 23:24:49 -07:00
parent d0376d4101
commit 83e7c6f2dc

View File

@@ -94,7 +94,7 @@ let
icmp6-ratehook = rateHook6;
icmp4-ratehook = rateHook4;
}
// (lib.recursiveUpdate extraRules (lib.recursiveUpdate sets rules));
// (lib.recursiveUpdate (lib.recursiveUpdate sets rules) extraRules);
script = firewallgen "firewall1.nft" allRules;
name = "firewall";
service = longrun {