liminix

commit 83e7c6f2dce6f4eb86e4bc8d1a29503dd655b68c
parent d0376d41016e0ddbd532b63f7fd3b2f4fcbcdf37
Author: Peter Collingbourne <peter@pcc.me.uk>
Date:   Sat,  2 May 2026 23:24:49 -0700

Move extraRules to the end of the recursiveUpdate

extraRules is the user-specified ruleset so this allows the
user configuration to override the builtin rules.

Diffstat:
M
modules/firewall/service.nix
 | 
2
+-

1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/modules/firewall/service.nix b/modules/firewall/service.nix
@@ -94,7 +94,7 @@ let
     icmp6-ratehook = rateHook6;
     icmp4-ratehook = rateHook4;
   }
-  // (lib.recursiveUpdate extraRules (lib.recursiveUpdate sets rules));
+  // (lib.recursiveUpdate (lib.recursiveUpdate sets rules) extraRules);
   script = firewallgen "firewall1.nft" allRules;
   name = "firewall";
   service = longrun {