firewall: limitation NFS et Slimserver au LAN

systems/LoutreOS/configuration.nix

@@ -83,6 +83,21 @@ in
       internalInterfaces = [ "eno2" ];
     };
 
+    firewall = {
+      allowedTCPPorts = [ ];
+      allowedUDPPorts = [ ];
+      interfaces.eno2 = {
+        allowedTCPPorts = [
+          111 2049 4000 4001 4002 # NFS
+          3483 9000 9090 # Slimserver
+        ];
+        allowedUDPPorts = [
+          111 2049 4000 4001 4002 # NFS
+          3483 # Slimserver
+        ];
+      };
+      enable = true;
+    };
   };
 
   services.dhcpd4 = {
@@ -108,12 +123,6 @@ in
     passwordAuthentication = false;
   };
 
-  networking.firewall = {
-    allowedTCPPorts = [ ];
-    allowedUDPPorts = [ ];
-    enable = true;
-  };
-
   security.sudo.wheelNeedsPassword = false;
 
   system.stateVersion = "18.03";

systems/LoutreOS/services.nix

@@ -436,8 +436,6 @@ in
     };
 
     firewall.allowedTCPPorts = [
-      111 2049 4000 4001 4002 # NFS
-      3483 9000 9090 # Slimserver
       51413 # Transmission
       8448 # Matrix federation
       20 21 # FTP
@@ -448,8 +446,6 @@ in
     ];
 
     firewall.allowedUDPPorts = [
-      111 2049 4000 4001 4002 # NFS
-      3483 # Slimserver
       51413 # Transmission
       51820 # Wireguard
     ];