enable firewalls

1 files changed, 10 insertions, 0 deletions

diff --git a/modules/quassel/quassel.nix b/modules/quassel/quassel.nix
index e8ef580..9a31c32 100644
--- a/modules/quassel/quassel.nix
+++ b/modules/quassel/quassel.nix
@@ -38,6 +38,14 @@ in
           Useful for e.g. access to acme certificates.
         '';
       };
+      
+      openFirewall = mkOption {
+        type = types.bool;
+        default = false;
+        description = lib.mdDoc ''
+          Open the firewall for the port defined in {option}`services.quassel.settings.port`
+        '';
+      };
 
       environmentFile = mkOption {
         type = types.nullOr types.path;
@@ -430,6 +438,8 @@ in
       }
     ];
 
+    networking.firewall.allowedTCPPorts = lib.mkIf cfg.openFirewall [ cfg.settings.port cfg.settings.ident.port ];
+
     systemd.services.quassel =
       {
         description = "Quassel IRC client daemon";