Test

nixos/hosts/framework-server/default.nix

@@ -11,6 +11,7 @@
     ./builder.nix
     ./wireguard.nix
     ./cron.nix
+    ./firewall.nix
   ];
 
     environment.systemPackages =  [

nixos/hosts/framework-server/firewall.nix

@@ -0,0 +1,17 @@
+{ config, lib, pkgs, ... }: {
+  networking.firewall.allowedUDPPorts = [
+    3478  # Headscale DERP UDP
+    10000 # Jitsi
+  ];
+  networking.firewall.allowedTCPPorts = [
+    80    # HTTP
+    443   # HTTPS
+    42420 # Vintage Story
+    25565 # Minecraft
+    1443  # Headscale DERP
+    4443  # jitsi-jvb
+    5222  # Jitsi
+    5347  # Jitsi
+    5280  # Jitsi
+  ];
+}