diff --git a/hosts/box/configuration.nix b/hosts/box/configuration.nix index 5faf426c..4ff5d22c 100644 --- a/hosts/box/configuration.nix +++ b/hosts/box/configuration.nix @@ -91,16 +91,6 @@ # Enable the OpenSSH daemon. services.openssh.enable = true; - networking.firewall.allowedTCPPorts = [ - 22 # SSH - 5003 # opencode-manager backend - 5173 # opencode-manager frontend - 5551 # opencode server - ]; - networking.firewall.allowedTCPPortRanges = [{ - from = 7000; - to = 9000; - }]; # opencode-manager: ports for testing user changes programs.gnupg.agent.enable = true; programs.gnupg.agent.pinentryPackage = pkgs.pinentry-curses; diff --git a/hosts/box/default.nix b/hosts/box/default.nix index c0634830..0c71ff87 100644 --- a/hosts/box/default.nix +++ b/hosts/box/default.nix @@ -57,13 +57,17 @@ # seafile }; - # for vibe code stuff, over wireguard + # opencode-manager ports networking.firewall = { - allowedTCPPorts = [ 22 3000 4173 ]; # allow ssh, vibe, and vibekanban + allowedTCPPorts = [ + 5003 # opencode-manager backend + 5173 # opencode-manager frontend + 5551 # opencode server + ]; allowedTCPPortRanges = [{ - from = 6666; - to = 7666; - }]; + from = 7000; + to = 9000; + }]; # ports for testing user changes }; environment.systemPackages = with pkgs; [ lm_sensors ];