networking.firewall.extraInputRules

NixOS option

Additional nftables rules to be appended to the input-allow chain. This option only works with the nftables based firewall.

type: strings concatenated with "\n"
Default
""
Example
"ip6 saddr { fc00::/7, fe80::/10 } tcp dport 24800 accept"
declared in: nixos/modules/services/networking/firewall-nftables.nixView source on NixOS/nixpkgs →