From f89b492dc9989d5a96832d0e549c7c91667a17be Mon Sep 17 00:00:00 2001
From: Fern Garden <mail@fern.garden>
Date: Sat, 12 Jul 2025 15:36:55 +0800
Subject: [PATCH] Open ports for Netatalk & WebOne

---
 hosts/weebill.nix | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/hosts/weebill.nix b/hosts/weebill.nix
index 6be91cd..363b7cc 100644
--- a/hosts/weebill.nix
+++ b/hosts/weebill.nix
@@ -20,12 +20,6 @@
     };
   };
 
-  # Open ports for DHCP server.
-  networking.firewall.allowedUDPPorts = [
-    53
-    67
-  ];
-
   # Enable WebOne HTTP proxy.
   services.webone.enable = true;
 
@@ -40,4 +34,12 @@
       };
     };
   };
+  # Open ports for services.
+  networking.firewall = {
+    allowedUDPPorts = [
+      53 # DHCP server.
+      67 # DHCP server.
+    ];
+    allowedTCPPorts = [8080 548]; # WebOne & Netatalk.
+  };
 }