From be8777af35cca4a96f0834cf5af90a5b537de498 Mon Sep 17 00:00:00 2001
From: Nickiel12 <nicholasyoungsumner@gmail.com>
Date: Thu, 11 Jan 2024 18:42:13 -0800
Subject: [PATCH] firewall changes

---
 hosts/Alaska/modules/firewall.nix | 5 +++--
 hosts/Alaska/modules/forgejo.nix  | 2 +-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/hosts/Alaska/modules/firewall.nix b/hosts/Alaska/modules/firewall.nix
index c0edb27..cefb52d 100644
--- a/hosts/Alaska/modules/firewall.nix
+++ b/hosts/Alaska/modules/firewall.nix
@@ -11,7 +11,8 @@ in
         # ${pkgs.nftables}/bin/nft -f - <<EOF
 
         # EOF
-        ${pkgs.nftables}/bin/nft insert rule filter nixos-fw ip saddr 100.64.0.0-100.64.255.255 iifname "enp2s0" counter
+        # Already handled by tailscale in ts-input
+        # ${pkgs.nftables}/bin/nft insert rule filter nixos-fw ip saddr 100.64.0.0-100.64.255.255 iifname "enp2s0" counter jump nixos-fw-log-refuse
       '';
-  }
+  };
 }
diff --git a/hosts/Alaska/modules/forgejo.nix b/hosts/Alaska/modules/forgejo.nix
index ad8444b..adaa4e0 100644
--- a/hosts/Alaska/modules/forgejo.nix
+++ b/hosts/Alaska/modules/forgejo.nix
@@ -9,7 +9,7 @@ in
 {
   networking.firewall = {
     allowedTCPPorts = [3001];
-  }
+  };
 
   system.activationScripts.copyStuff = "cp -r ${../../../rsrcs/giteaCustomDir}/. /Aurora/Forgejo/custom";
   system.activationScripts.copyTheme = "mkdir -p /Aurora/Forgejo/custom/public/assets/css && cp ${palenight}/dist/theme-palenight.css /Aurora/Forgejo/custom/public/assets/css/";