From 620b4680d76818a03f5f955eb1b6d9fa06c5e3ad Mon Sep 17 00:00:00 2001
From: notgne2 <gen2@gen2.space>
Date: Mon, 10 Jan 2022 14:58:33 -0700
Subject: [PATCH] saner firewall defaults

---
 common.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/common.nix b/common.nix
index e43a63e..dec6ff7 100644
--- a/common.nix
+++ b/common.nix
@@ -87,7 +87,7 @@
 
     # Use a firewall
     networking.firewall.enable = lib.mkDefault true;
-    networking.firewall.allowedTCPPorts = [ 22 443 80 ];
+    networking.firewall.allowedTCPPorts = lib.mkDefault [ 22 ];
 
     programs.fish.enable = lib.mkDefault true;
     users.defaultUserShell = lib.mkOverride 900 pkgs.fish;