feat(jeeves): centralize firewall configuration

- split networking into interface and firewall modules - define named service ports in one location - remove scattered service-level firewall rules
2026-08-27 16:59:44 -04:00
parent 7e6908ef3d
commit d95b8b99ce
13 changed files with 64 additions and 48 deletions
@@ -2,10 +2,6 @@ let
  vars = import ../vars.nix;
 in
 {
-  networking.firewall.allowedTCPPorts = [
-    2223
-  ];
-
  services.gitea = {
    enable = true;
    appName = "TMM Workshop";