From 25d7468ff6e27a3f04c9cd4767b5632e51d03123 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Tue, 27 Oct 2026 02:34:13 +0100
Subject: headscale: fix typo, tower: remove tailnet fw rules

---
 hosts/enode/headscale.nix | 2 +-
 hosts/tower/web/caddy.nix | 7 -------
 2 files changed, 1 insertion(+), 8 deletions(-)

diff --git a/hosts/enode/headscale.nix b/hosts/enode/headscale.nix
index d481917..f457e28 100644
--- a/hosts/enode/headscale.nix
+++ b/hosts/enode/headscale.nix
@@ -37,7 +37,7 @@ in
         magic_dns = true;
         extra_records =
           let
-            towerAddr = "100.0.0.6";
+            towerAddr = "100.64.0.6";
             towerSubdomains = [
               "music"
               "vaultwarden"
diff --git a/hosts/tower/web/caddy.nix b/hosts/tower/web/caddy.nix
index 2bead84..ca72f1a 100644
--- a/hosts/tower/web/caddy.nix
+++ b/hosts/tower/web/caddy.nix
@@ -8,7 +8,6 @@
 let
   cfg = config.services.caddy;
   wg-ip = "100.64.0.6";
-  wg-int = config.services.tailscale.interfaceName;
 
   vw = {
     domain = config.services.vaultwarden.domain;
@@ -36,12 +35,6 @@ let
   tls-config = "tls {$CREDENTIALS_DIRECTORY}/sorre.internal.crt {$CREDENTIALS_DIRECTORY}/sorre.internal.key";
 in
 {
-  networking.firewall.interfaces."${wg-int}".allowedTCPPorts = [
-    config.services.caddy.httpPort
-    config.services.caddy.httpsPort
-    blog.port
-  ];
-
   services.caddy = {
     enable = true;
     virtualHosts = {
-- 
cgit v1.3.1