diff --git a/networking/firewall.mod.nix b/networking/firewall.mod.nix index bf20cde..ddec8a3 100644 --- a/networking/firewall.mod.nix +++ b/networking/firewall.mod.nix @@ -1,11 +1,12 @@ { universal.modules = [ - ({ + { networking.firewall.enable = true; networking.nftables.enable = true; - }) - ({ - networking.firewall.interfaces.wg0 = { # TODO: set up prometheus authentication, perhaps with a certificate. not *that* urgent because it's only on the wireguard netwrok, maybe it's not even needed at all -e + } + { + networking.firewall.interfaces.wg0 = { + # TODO: set up prometheus authentication, perhaps with a certificate. not *that* urgent because it's only on the wireguard netwrok, maybe it's not even needed at all -e allowedTCPPorts = [ 6703 ]; @@ -13,7 +14,7 @@ 6703 ]; }; - }) + } ]; fructose.modules = [