firewall

1 files changed, 3 insertions, 1 deletions

diff --git a/flake.nix b/flake.nix
index 5f3526d..3482ffe 100644
--- a/flake.nix
+++ b/flake.nix
@@ -99,10 +99,12 @@
                 };
               };
 
+              networking.firewall.allowedTCPPorts = [ 443 80 ];
+
               services.nginx = {
                 enable = true;
                 recommendedProxySettings = true;
-                recommendedTlsSettings = true;
+                recommendedTlsSettings = true; 
                 virtualHosts."${config.cara.services.carasite.domain}" = { 
                   forceSSL = true;
                   enableACME = true;