modularized firewall logic

2025-09-27 17:44:01 -06:00
parent 3d3f49aeec
commit 99574c9b66
27 changed files with 31 additions and 56 deletions
--- a/modules/servers/shiori.nix
+++ b/modules/servers/shiori.nix
@@ -6,7 +6,6 @@ in
 {
  options.my.servers.shiori = setup.mkOptions "shiori" "bookmarks" 4368;
  config = lib.mkIf (config.my.servers.shiori.enable && config.my.servers.postgres.enable) {
-    networking.firewall.allowedTCPPorts = lib.mkIf (!cfg.isLocal) [ cfg.port ];
    sops.secrets = lib.mkIf cfg.enable { shiori.sopsFile = ../../secrets/env.yaml; };
    services = {
      shiori = lib.mkIf cfg.enable {