From 901555228b43fe1193f97cfcd67197dc986a1a2a Mon Sep 17 00:00:00 2001
From: iFargle <albert@sysctl.io>
Date: Fri, 13 Oct 2023 13:37:43 +0900
Subject: [PATCH] allow ssh over wireguard

---
 nixos/hosts/osaka-vultr-01/wireguard.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/hosts/osaka-vultr-01/wireguard.nix b/nixos/hosts/osaka-vultr-01/wireguard.nix
index f8d20dfc..6dec6996 100644
--- a/nixos/hosts/osaka-vultr-01/wireguard.nix
+++ b/nixos/hosts/osaka-vultr-01/wireguard.nix
@@ -1,5 +1,6 @@
 { pkgs, config, lib, ... }: {
   networking.firewall.allowedUDPPorts = [ 51820 ];
+  networking.firewall.wireguard0.allowedTCPPorts = [ 22 ];
 
   # Set up the secrets file:
   sops.secrets."wireguard_keys/osaka-vultr-01" = {