feat(jeeves): centralize firewall configuration

- split networking into interface and firewall modules - define named service ports in one location - remove scattered service-level firewall rules
2026-08-27 08:39:02 -04:00
parent 677364fe74
commit 8bc1e6011f
13 changed files with 65 additions and 47 deletions
@@ -7,6 +7,5 @@ in
    package = pkgs.nix-serve-ng;
    enable = true;
    secretKeyFile = "${vars.secrets}/services/nix-cache/cache-priv-key.pem";
-    openFirewall = false;
  };
 }