summary refs log tree commit diff
path: root/nixos/modules/services
diff options
context:
space:
mode:
authorPeter Simons <simons@cryp.to>2013-12-23 21:27:07 +0100
committerPeter Simons <simons@cryp.to>2013-12-23 21:27:07 +0100
commit19a79fc71dae59026738404b4f04ff273337b52d (patch)
tree5c8b418ab58eb47732306b3725f0244b11c7a30b /nixos/modules/services
parent71ee40a0459efa00fc23f5a4b0d43367d91b354a (diff)
downloadnixlib-19a79fc71dae59026738404b4f04ff273337b52d.tar
nixlib-19a79fc71dae59026738404b4f04ff273337b52d.tar.gz
nixlib-19a79fc71dae59026738404b4f04ff273337b52d.tar.bz2
nixlib-19a79fc71dae59026738404b4f04ff273337b52d.tar.lz
nixlib-19a79fc71dae59026738404b4f04ff273337b52d.tar.xz
nixlib-19a79fc71dae59026738404b4f04ff273337b52d.tar.zst
nixlib-19a79fc71dae59026738404b4f04ff273337b52d.zip
nixos: don't white-list port 631 in the firewall when CUPS is enabled
If you want CUPS to receive UDP printer announcements from the rest of the
world, please add

  networking.firewall.allowedUDPPorts = [ 631 ];

to /etc/nixos/configuration.nix.

See <http://lists.science.uu.nl/pipermail/nix-dev/2013-November/011997.html>
for the discussion that lead to this.
Diffstat (limited to 'nixos/modules/services')
-rw-r--r--nixos/modules/services/printing/cupsd.nix3
1 files changed, 0 insertions, 3 deletions
diff --git a/nixos/modules/services/printing/cupsd.nix b/nixos/modules/services/printing/cupsd.nix
index 56ae399c9011..1be3587c3bb9 100644
--- a/nixos/modules/services/printing/cupsd.nix
+++ b/nixos/modules/services/printing/cupsd.nix
@@ -223,9 +223,6 @@ in
         </Policy>
       '';
 
-    # Allow CUPS to receive IPP printer announcements via UDP.
-    networking.firewall.allowedUDPPorts = [ 631 ];
-
     security.pam.services.cups = {};
 
   };