refactor(firewall): Make services responsible for opening ports

This commit is contained in:
Tristan Daniël Maat 2025-11-20 00:17:43 +08:00
parent 12790d5444
commit 6bedb95929
Signed by: tlater
GPG key ID: 02E935006CF2E8E7
9 changed files with 63 additions and 39 deletions

View file

@ -3,6 +3,11 @@ let
inherit (config.services.nginx) domain;
in
{
networking.firewall.allowedTCPPorts = [
80
443
];
services.tlaternet-webserver = {
enable = true;
listen = {