nixos/shairport-sync: add firewall rules

Add an option to automatically open the firewall for shairport.
This commit is contained in:
Matthew Leach 2021-11-30 19:16:08 +00:00
parent b56d7a70a7
commit ea90c516e7

View file

@ -36,6 +36,14 @@ in
'';
};
openFirewall = mkOption {
type = types.bool;
default = false;
description = ''
Whether to automatically open ports in the firewall.
'';
};
user = mkOption {
type = types.str;
default = "shairport";
@ -66,6 +74,12 @@ in
extraGroups = [ "audio" ] ++ optional config.hardware.pulseaudio.enable "pulse";
};
networking.firewall = mkIf cfg.openFirewall {
allowedTCPPorts = [ 5000 ];
allowedUDPPortRanges = [ { from = 6001; to = 6011; } ];
};
systemd.services.shairport-sync =
{
description = "shairport-sync";