From 6183c7e205807d64504cbb8e59764b75168fb394 Mon Sep 17 00:00:00 2001
From: Cara Salter <cara@devcara.com>
Date: Wed, 6 Apr 2022 13:20:55 -0400
Subject: firewall

---
 flake.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 5f3526d..3482ffe 100644
--- a/flake.nix
+++ b/flake.nix
@@ -99,10 +99,12 @@
                 };
               };
 
+              networking.firewall.allowedTCPPorts = [ 443 80 ];
+
               services.nginx = {
                 enable = true;
                 recommendedProxySettings = true;
-                recommendedTlsSettings = true;
+                recommendedTlsSettings = true; 
                 virtualHosts."${config.cara.services.carasite.domain}" = { 
                   forceSSL = true;
                   enableACME = true;
-- 
cgit v1.2.3