From 41211b41bb9a7c2b1ce0ed927cffbc8d2638ac0a Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Wed, 1 Jul 2026 23:25:24 -0500
Subject: [PATCH] fix firewall

---
 hosts/nixos/vaniville/configuration.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/hosts/nixos/vaniville/configuration.nix b/hosts/nixos/vaniville/configuration.nix
index fc330fa..ed80337 100644
--- a/hosts/nixos/vaniville/configuration.nix
+++ b/hosts/nixos/vaniville/configuration.nix
@@ -112,9 +112,9 @@ in {
     # what actually does the forwarding
     firewall = {
       enable = true;
-      allowedTCPPorts = [22 80 443 25777 25579 25580 7567 21115 21116 21117 21118 21119];
+      allowedTCPPorts = [22 80 443 25777 25579 7567 21115 21116 21117 21118 21119];
       # tailscale will also need its UDP port open:
-      allowedUDPPorts = [config.services.tailscale.port 25777 21116];
+      allowedUDPPorts = [config.services.tailscale.port 25777 21116 25580];
       trustedInterfaces = ["tailscale0"];
       /*
       iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to-destination ${snowbelle_ip}:80        # http