refactor(firewall): Make services responsible for opening ports

This commit is contained in:
Tristan Daniël Maat 2025-11-20 00:17:43 +08:00
parent 2058665de0
commit 3506a3710a
Signed by: tlater
GPG key ID: 02E935006CF2E8E7
9 changed files with 63 additions and 39 deletions

View file

@ -8,6 +8,11 @@ let
domain = "gitea.${config.services.nginx.domain}";
in
{
networking.firewall.allowedTCPPorts = [
80
443
];
services = {
forgejo = {
enable = true;