From 830c1f6905d22082e97f22860108a7df11484f22 Mon Sep 17 00:00:00 2001
From: Dennis Schoepf <me@dnsc.io>
Date: Thu, 15 Jan 2026 20:22:54 +0100
Subject: [PATCH] open firewall

---
 hosts/dnsc-server/default.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/hosts/dnsc-server/default.nix b/hosts/dnsc-server/default.nix
index 41300f1..8eebf0c 100644
--- a/hosts/dnsc-server/default.nix
+++ b/hosts/dnsc-server/default.nix
@@ -57,7 +57,15 @@
   systemd.services.NetworkManager-wait-online.enable = false;
 
   # Firewall
-  networking.firewall.enable = true;
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      9002 # Actual
+    ];
+    allowedUDPPorts = [
+      9002 # Actual
+    ];
+  };
 
   # My user account
   users.users.dennis = {