From 61684bbb6ce171286bb5ee75b7795cfdf57e3bab Mon Sep 17 00:00:00 2001
From: albert <albert@sysctl.io>
Date: Mon, 23 Dec 2024 22:38:58 +0100
Subject: [PATCH] Testing

---
 nixos/hosts/nuc-server/firewall.nix | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 nixos/hosts/nuc-server/firewall.nix

diff --git a/nixos/hosts/nuc-server/firewall.nix b/nixos/hosts/nuc-server/firewall.nix
new file mode 100644
index 00000000..6ef99846
--- /dev/null
+++ b/nixos/hosts/nuc-server/firewall.nix
@@ -0,0 +1,21 @@
+{ ... }: {
+  networking = {
+    firewall = {
+      enable = true;
+      allowedTCPPorts = [
+        53   # DNS
+        80    # HTTP
+        443   # HTTPS
+      ];
+      interfaces = {
+        tailscale0= { 
+          allowedTCPPorts = [
+            53   # DNS
+            80    # HTTP
+            443   # HTTPS
+          ];
+        };
+      };
+    };
+  };
+}