From 7b806690a830e2e11397759cc31fbe14b3d4f772 Mon Sep 17 00:00:00 2001
From: Daniel Frank <git@danielfrank.net>
Date: Thu, 18 Jul 2019 23:18:08 +0200
Subject: [PATCH] firewall: stop logging all those port scans... nobody's ever
 going to look at that data anyway.

---
 configuration.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/configuration.nix b/configuration.nix
index edfc499..d4e5d33 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -49,6 +49,7 @@
       "194.150.168.168" # AS250, https://www.ccc.de/de/censorship/dns-howto
     ];
     firewall.rejectPackets = true;
+    firewall.logRefusedConnections = false;
   };
 
   # Automatic update each day at 04:40. Will not restart the system, so a reboot every now and then is a good idea.