From 0878859b171a713aba56f06e9cf5472069a5608d Mon Sep 17 00:00:00 2001
From: Emery Hemingway <ehmry@posteo.net>
Date: Mon, 20 Jan 2020 16:54:27 +0100
Subject: [PATCH] Hydra: disable firewall

Firewalls are only for poorly configured systems running insecure
services.
---
 hosts/hydra/configuration.nix | 1 +
 hosts/hydra/hydra.nix         | 2 --
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/hosts/hydra/configuration.nix b/hosts/hydra/configuration.nix
index 05f80c4d..14bc8b47 100644
--- a/hosts/hydra/configuration.nix
+++ b/hosts/hydra/configuration.nix
@@ -76,6 +76,7 @@
   };
 
   networking.hostName = "hydra";
+  networking.firewall.enable = false;
 
   networking.useHostResolvConf = true;
 
diff --git a/hosts/hydra/hydra.nix b/hosts/hydra/hydra.nix
index cce82086..d223140c 100644
--- a/hosts/hydra/hydra.nix
+++ b/hosts/hydra/hydra.nix
@@ -40,6 +40,4 @@
       };
     };
   };
-
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
 }