feat(jeeves): centralize firewall configuration

- split networking into interface and firewall modules - define named service ports in one location - remove scattered service-level firewall rules
2026-08-27 08:42:00 -04:00
parent 677364fe74
commit 8790e45a03
13 changed files with 65 additions and 47 deletions
@@ -6,8 +6,6 @@ let
  grafanaDataDir = "${vars.services}/grafana";
 in
 {
-  networking.firewall.allowedTCPPorts = [ 3000 ];
-
  services.grafana = {
    enable = true;
    dataDir = grafanaDataDir;