From 0682f32cc76277fe8c89e1da7a90fc316550083c Mon Sep 17 00:00:00 2001
From: Dustin Frisch <fooker@lab.sh>
Date: Wed, 23 Aug 2023 16:02:12 +0200
Subject: [PATCH] Allow all in-cluster traffic

---
 shared/network.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/shared/network.nix b/shared/network.nix
index d0d45e8..55c6d85 100644
--- a/shared/network.nix
+++ b/shared/network.nix
@@ -15,4 +15,6 @@
   networking.useDHCP = false;
 
   networking.nftables.enable = true;
+
+  networking.firewall.extraInputRules = "ip saddr 10.32.47.0/24 accept";
 }