From ad72e17f93c1623c9709d22ba99be6b51abf392b Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Wed, 8 Dec 2021 17:57:54 +0100
Subject: [PATCH] Firewall ports

---
 node/carcajou.nix | 3 +++
 site/neptune.nix  | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/node/carcajou.nix b/node/carcajou.nix
index bc90d76..74109bd 100644
--- a/node/carcajou.nix
+++ b/node/carcajou.nix
@@ -29,4 +29,7 @@
   # Activate as Nomad and Consul server node
   services.nomad.settings.server.enabled = true;
   services.consul.extraConfig.server = true;
+
+  # Use this node as entrypoint to cluster (Diplonat not working for now)
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
 }
diff --git a/site/neptune.nix b/site/neptune.nix
index a42e2a7..27e2588 100644
--- a/site/neptune.nix
+++ b/site/neptune.nix
@@ -8,6 +8,8 @@
 
   services.nomad.settings.datacenter = "neptune";
 
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+
   # ----
 
   nix = {