From 3dd7840b061c9f75dc21b3111320940f6a4cd3af Mon Sep 17 00:00:00 2001
From: Christoph Schmatzler <christoph@schmatzler.com>
Date: Tue, 27 Jan 2026 19:11:55 +0000
Subject: [PATCH] up

---
 hosts/tahani/adguardhome.nix |  3 ++-
 hosts/tahani/networking.nix  | 10 +++++++---
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/hosts/tahani/adguardhome.nix b/hosts/tahani/adguardhome.nix
index 979f783..1e432ad 100644
--- a/hosts/tahani/adguardhome.nix
+++ b/hosts/tahani/adguardhome.nix
@@ -1,6 +1,7 @@
-{...}: {
+{
 	services.adguardhome = {
 		enable = true;
+		host = "0.0.0.0";
 		port = 10000;
 		settings = {
 			dns = {
diff --git a/hosts/tahani/networking.nix b/hosts/tahani/networking.nix
index 4c4371b..f2bba33 100644
--- a/hosts/tahani/networking.nix
+++ b/hosts/tahani/networking.nix
@@ -11,9 +11,13 @@
 		nameservers = ["1.1.1.1"];
 		firewall = {
 			enable = true;
-			trustedInterfaces = ["tailscale0"];
-			allowedUDPPorts = [config.services.tailscale.port];
-			allowedTCPPorts = [22];
+			trustedInterfaces = ["eno1" "tailscale0"];
+			allowedUDPPorts = [
+				config.services.tailscale.port
+			];
+			allowedTCPPorts = [
+				22
+			];
 			checkReversePath = "loose";
 		};
 	};