tweaked the firewall for forgejo

cluster/virtualisation.mod.nix

@@ -3,12 +3,12 @@
     ({
       users.users.emv.extraGroups = [
         "podman"
-        "docker"
+       # "docker"
       ];
     })
   ];
   sucrose.modules = [
-    ({
+   /* ({
       virtualisation.docker = {
         enable = true;
         storageDriver = "btrfs";
@@ -18,7 +18,7 @@
           data-root = "/home/emv/docker-data-root/";
         };
       };
-    })
+    })*/
     (
       { pkgs, ... }:
       {

nerd.mod.nix

@@ -5,6 +5,7 @@
       {
         home.packages = with pkgs; [
           geogebra6 # geogebra5 currently does not work?
+          gimp
           chemtool
           avogadro2
         ];

networking/firewall.mod.nix

@@ -11,6 +11,7 @@
         allowedUDPPorts = [
           #    53 # pihole
           #    5894 # couchdb
+          222 # forgejo ssh. for the handshake i think
         ];
         allowedTCPPorts = [
           222 # forgejo ssh

networking/tailscale.mod.nix

@@ -39,11 +39,11 @@
     }
   ];
 
-  sucrose.modules = [
+  /*sucrose.modules = [
     {
       services.tailscale.extraSetFlags = [
         "--advertise-exit-node"
       ];
     }
-  ];
+  ];*/ # this is not needed, currently -e
 }