From dc24ef3e85ec5c7ff55b7b97ca333629e315eeb5 Mon Sep 17 00:00:00 2001
From: albert <albert@sysctl.io>
Date: Tue, 22 Oct 2024 13:29:36 +0200
Subject: [PATCH] Update firewall ports

---
 nixos/hosts/framework-server/firewall.nix | 47 ++++++++++++-----------
 1 file changed, 24 insertions(+), 23 deletions(-)

diff --git a/nixos/hosts/framework-server/firewall.nix b/nixos/hosts/framework-server/firewall.nix
index 4397eedc..068f0fb2 100644
--- a/nixos/hosts/framework-server/firewall.nix
+++ b/nixos/hosts/framework-server/firewall.nix
@@ -2,29 +2,30 @@
   networking = {
     firewall = {
       enable = true;
-      allowedTCPPorts = [
-        53   # DNS
-        80    # HTTP
-        443   # HTTPS
-        42420 # Vintage Story
-        25565 # Minecraft
-        1443  # Headscale DERP (tcp)
-        25   # Mailserver
-        143  # Mailserver
-        465  # Mailserver
-        587  # Mailserver
-        993  # Mailserver
-        4190 # Mailserver
-        5696 # dsm-kmip server
-        3389 # RDP
-        4443 # Jitsi
-      ];
-      allowedUDPPorts = [
-        53    # DNS (udp)
-        10000 # Jitsi Meet (udp)
-        15636 # Enshrouded - Game
-        15637 # Enshrouded - Query Port
-      ];
+      interfaces.wireguard0 = { 
+        allowedTCPPorts = [
+          # 53   # DNS
+          80    # HTTP
+          443   # HTTPS
+          42420 # Vintage Story
+          25565 # Minecraft
+          1443  # Headscale DERP (tcp)
+          25   # Mailserver
+          143  # Mailserver
+          465  # Mailserver
+          587  # Mailserver
+          993  # Mailserver
+          4190 # Mailserver
+          # 5696 # dsm-kmip server
+          4443 # Jitsi
+        ];
+        allowedUDPPorts = [
+          # 53    # DNS (udp)
+          10000 # Jitsi Meet (udp)
+          # 15636 # Enshrouded - Game
+          # 15637 # Enshrouded - Query Port
+        ];
+      };
     };
   };
 }