From dd28a0b357ae94fa8dc26ba8bd00e6f910e790f2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Sat, 29 Apr 2023 23:36:13 +0200
Subject: [PATCH] glotzbert: enable firewall

---
 hosts/glotzbert/default.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/hosts/glotzbert/default.nix b/hosts/glotzbert/default.nix
index bd5986ca..70d49697 100644
--- a/hosts/glotzbert/default.nix
+++ b/hosts/glotzbert/default.nix
@@ -26,6 +26,11 @@
 
   networking = {
     domain = "hq.c3d2.de";
+    firewall = {
+      allowedTCPPorts = [
+        5900 # vnc
+      ];
+    };
     hostId = "42424242";
     hostName = "glotzbert";
     interfaces.enp0s25.useDHCP = true;
@@ -60,9 +65,6 @@
     };
   };
 
-  # TODO: enable
-  networking.firewall.enable = false;
-
   sound.enable = true;
 
   hardware = {