refactor(firewall): Make services responsible for opening ports

This commit is contained in:
Tristan Daniël Maat 2025-11-20 00:17:43 +08:00
parent ffe8e4acf6
commit d79bffe369
Signed by: tlater
GPG key ID: 02E935006CF2E8E7
9 changed files with 63 additions and 39 deletions

View file

@ -3,6 +3,11 @@ let
domain = "metrics.${config.services.nginx.domain}";
in
{
networking.firewall.allowedTCPPorts = [
80
443
];
services.grafana = {
enable = true;
settings = {