From 27c2541c3d2b410d5b7eb0af744c93c859181ba5 Mon Sep 17 00:00:00 2001
From: Caroline Larimore <caroline@larimo.re>
Date: Tue, 6 May 2025 16:44:57 -0700
Subject: copenhagen: move web firewall config to top level module

---
 modules/nixos/services/web/default.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'modules/nixos/services/web/default.nix')

diff --git a/modules/nixos/services/web/default.nix b/modules/nixos/services/web/default.nix
index 1e1e854..cc9395c 100644
--- a/modules/nixos/services/web/default.nix
+++ b/modules/nixos/services/web/default.nix
@@ -15,6 +15,8 @@ in {
       ];
     };
 
+    networking.firewall.allowedTCPPorts = [ 80 443 ];
+
     security.acme = {
       acceptTerms = true;
       defaults.email = "caroline@larimo.re";
-- 
cgit v1.2.3