From 79b94f70278506565a968b7044769a6afa18869e Mon Sep 17 00:00:00 2001
From: Dennis <dennis@dnsc-work.fritz.box>
Date: Mon, 26 Jan 2026 10:12:52 +0100
Subject: [PATCH] updates port/firewall declaration for cockpit

---
 hosts/dnsc-server/default.nix | 2 ++
 modules/cockpit/default.nix   | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/hosts/dnsc-server/default.nix b/hosts/dnsc-server/default.nix
index 7771054..691f0cf 100644
--- a/hosts/dnsc-server/default.nix
+++ b/hosts/dnsc-server/default.nix
@@ -63,9 +63,11 @@
     enable = true;
     allowedTCPPorts = [
       9002 # Actual
+      9999 # Cockpit
     ];
     allowedUDPPorts = [
       9002 # Actual
+      9999 # Cockpit
     ];
   };
 
diff --git a/modules/cockpit/default.nix b/modules/cockpit/default.nix
index 5dfd7ce..ae68357 100644
--- a/modules/cockpit/default.nix
+++ b/modules/cockpit/default.nix
@@ -2,6 +2,8 @@
   services.cockpit = {
     enable = true;
     port = 9999;
+    openFirewall = true;
+    allowed-origins = [ "192.168.178.69:9999" ];
     settings = {
       WebService = {
         AllowUnencrypted = true;