up

Signed-off-by: Christoph Schmatzler <christoph@schmatzler.com>

hosts/tahani/default.nix

@@ -2,10 +2,12 @@
 	config,
 	hostname,
 	user,
+	inputs,
 	...
 }: {
 	imports = [
 		../../modules/nixos
+		inputs.tangled.nixosModules.knot
 	];
 
 	services.adguardhome = {
@@ -28,6 +30,14 @@
 		};
 	};
 
+	services.tangled.knot = {
+		enable = true;
+		server = {
+			hostname = "knot.schmatzler.com";
+			owner = "did:plc:yiapylv5gwzlyzesppjmukvj";
+		};
+	};
+
 	virtualisation.docker = {
 		enable = true;
 	};
@@ -65,7 +75,7 @@
 			enable = true;
 			trustedInterfaces = ["eno1" "tailscale0"];
 			allowedUDPPorts = [config.services.tailscale.port];
-			allowedTCPPorts = [22];
+			allowedTCPPorts = [22 5555];
 			checkReversePath = "loose";
 		};
 	};