services: vault: open website

2024-10-22 15:38:51 +02:00
parent da1bcdd116
commit c4d3591ee7
1 changed files with 6 additions and 0 deletions
--- a/modules/services/nas/nginx.nix
+++ b/modules/services/nas/nginx.nix
@@ -39,6 +39,12 @@
    };
  };

+  networking.firewall = {
+    enable = true;
+    allowedUDPPorts = [  ];
+    allowedTCPPorts = [ 80 443 ];
+  };
+
  age.secrets."services/acme/opel-online" = {
    file = ../../../secrets/services/acme/opel-online.age;
    owner = "acme";