From 19a79fc71dae59026738404b4f04ff273337b52d Mon Sep 17 00:00:00 2001
From: Peter Simons <simons@cryp.to>
Date: Mon, 23 Dec 2013 21:27:07 +0100
Subject: nixos: don't white-list port 631 in the firewall when CUPS is enabled

If you want CUPS to receive UDP printer announcements from the rest of the
world, please add

  networking.firewall.allowedUDPPorts = [ 631 ];

to /etc/nixos/configuration.nix.

See <http://lists.science.uu.nl/pipermail/nix-dev/2013-November/011997.html>
for the discussion that lead to this.
---
 nixos/modules/services/printing/cupsd.nix | 3 ---
 1 file changed, 3 deletions(-)

(limited to 'nixos/modules/services')

diff --git a/nixos/modules/services/printing/cupsd.nix b/nixos/modules/services/printing/cupsd.nix
index 56ae399c9011..1be3587c3bb9 100644
--- a/nixos/modules/services/printing/cupsd.nix
+++ b/nixos/modules/services/printing/cupsd.nix
@@ -223,9 +223,6 @@ in
         </Policy>
       '';
 
-    # Allow CUPS to receive IPP printer announcements via UDP.
-    networking.firewall.allowedUDPPorts = [ 631 ];
-
     security.pam.services.cups = {};
 
   };
-- 
cgit 1.4.1