From c4d3591ee77a82708a4290aaaefc0722f8fcd1e7 Mon Sep 17 00:00:00 2001
From: Kabbone <tobias@opel-online.de>
Date: Tue, 22 Oct 2024 15:38:51 +0200
Subject: [PATCH] services: vault: open website

---
 modules/services/nas/nginx.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/modules/services/nas/nginx.nix b/modules/services/nas/nginx.nix
index 22dd4fe..2b1fec2 100644
--- a/modules/services/nas/nginx.nix
+++ b/modules/services/nas/nginx.nix
@@ -39,6 +39,12 @@
     };
   };
 
+  networking.firewall = {
+    enable = true;
+    allowedUDPPorts = [  ];
+    allowedTCPPorts = [ 80 443 ];
+  };
+
   age.secrets."services/acme/opel-online" = {
     file = ../../../secrets/services/acme/opel-online.age;
     owner = "acme";