From 89938e355bfd1fef65c690fc3a940dad99553d86 Mon Sep 17 00:00:00 2001
From: Christoph Schmatzler <christoph@schmatzler.com>
Date: Thu, 14 Aug 2025 12:21:52 +0000
Subject: [PATCH] fix firewall

---
 modules/networking/firewall.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/modules/networking/firewall.nix b/modules/networking/firewall.nix
index 63fbebd..1ee64cd 100644
--- a/modules/networking/firewall.nix
+++ b/modules/networking/firewall.nix
@@ -1,6 +1,9 @@
-{
+{config, ...}: {
   networking.firewall = {
     enable = true;
     trustedInterfaces = ["eno1" "tailscale0"];
+    allowedUDPPorts = [config.services.tailscale.port];
+    allowedTCPPorts = [22];
+    checkReversePath = "loose";
   };
 }