From 80abf0577c962e8d5a71e586f020953f939d90c6 Mon Sep 17 00:00:00 2001
From: Max Audron <audron@cocaine.farm>
Date: Wed, 30 Jul 2025 16:53:40 +0200
Subject: enable firewalls

---
 modules/powerdns/default.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'modules/powerdns/default.nix')

diff --git a/modules/powerdns/default.nix b/modules/powerdns/default.nix
index 1f411df..5a920ec 100644
--- a/modules/powerdns/default.nix
+++ b/modules/powerdns/default.nix
@@ -65,5 +65,7 @@ in
         else secondary;
       secretFile = "/etc/secrets/pdns_api.env";
     };
+    networking.firewall.allowedTCPPorts = [ 53 ];
+    networking.firewall.allowedUDPPorts = [ 53 ];
   };
 }
-- 
cgit v1.2.3