From 89185f285e1e12d70eb08add3f6bde8f37cb5ff5 Mon Sep 17 00:00:00 2001
From: Christoph Schmatzler <christoph@schmatzler.com>
Date: Sat, 6 Dec 2025 18:11:01 +0000
Subject: [PATCH] firewall

---
 hosts/michael/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/hosts/michael/default.nix b/hosts/michael/default.nix
index ceb778d..a7c838e 100644
--- a/hosts/michael/default.nix
+++ b/hosts/michael/default.nix
@@ -22,6 +22,13 @@
 		};
 	};
 
+	systemd.services.knot = {
+		after = [ "network-online.target" ];
+		wants = [ "network-online.target" ];
+	};
+
+	networking.firewall.allowedTCPPorts = [ 5555 ];
+
 	services.openssh = {
 		enable = true;
 		settings = {