From 3cb4ae7c502d414671456fd0263a73776b5eeef3 Mon Sep 17 00:00:00 2001
From: Kabbone <tobias@opel-online.de>
Date: Sat, 29 Jun 2024 07:20:28 +0200
Subject: [PATCH] apps: install ausweisapp

---
 hosts/configuration_desktop.nix            | 1 +
 hosts/desktop/hardware-configuration.nix   | 5 +++++
 hosts/steamdeck/hardware-configuration.nix | 6 +++---
 3 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/hosts/configuration_desktop.nix b/hosts/configuration_desktop.nix
index 4c665b8..a1708bf 100644
--- a/hosts/configuration_desktop.nix
+++ b/hosts/configuration_desktop.nix
@@ -116,6 +116,7 @@
       linuxPackages_latest.cpupower
       btop
       sbctl
+      ausweisapp
     ];
   };
 
diff --git a/hosts/desktop/hardware-configuration.nix b/hosts/desktop/hardware-configuration.nix
index f217498..2b55762 100644
--- a/hosts/desktop/hardware-configuration.nix
+++ b/hosts/desktop/hardware-configuration.nix
@@ -121,6 +121,11 @@
     networkmanager = {
       enable = false;
     };
+    firewall = {
+      enable = true;
+      allowedUDPPorts = [ 24727 ];
+      allowedTCPPorts = [ 24727 ];
+    };
   };
 
   systemd.network = {
diff --git a/hosts/steamdeck/hardware-configuration.nix b/hosts/steamdeck/hardware-configuration.nix
index e044708..b1ce700 100644
--- a/hosts/steamdeck/hardware-configuration.nix
+++ b/hosts/steamdeck/hardware-configuration.nix
@@ -171,9 +171,9 @@
     #nameservers = [ "192.168.0.4" ];
     firewall = {
       checkReversePath = "loose";
-    #  enable = false;
-    #  #allowedUDPPorts = [ 53 67 ];
-    #  #allowedTCPPorts = [ 53 80 443 9443 ];
+      enable = true;
+      allowedUDPPorts = [ 24727 ];
+      allowedTCPPorts = [ 24727 ];
     };
   };