From 316e8431c2723e258f9939dfe182f6ce3e7b0b89 Mon Sep 17 00:00:00 2001
From: lassulus <git@lassul.us>
Date: Tue, 12 Dec 2023 13:09:09 +0100
Subject: default: open retiolum ports

---
 krebs/2configs/default.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'krebs/2configs')

diff --git a/krebs/2configs/default.nix b/krebs/2configs/default.nix
index 0d55a01fa..dc02f54ae 100644
--- a/krebs/2configs/default.nix
+++ b/krebs/2configs/default.nix
@@ -9,6 +9,8 @@ with import ../../lib/pure.nix { inherit lib; };
   krebs.announce-activation.enable = true;
   krebs.enable = true;
   krebs.tinc.retiolum.enable = mkDefault true;
+  networking.firewall.allowedTCPPorts = [ 655 ];
+  networking.firewall.allowedUDPPorts = [ 655 ];
 
   # trust krebs ACME CA
   krebs.ssl.trustIntermediate = true;
-- 
cgit v1.2.3