From 65547b241d7b86cd0b309045d10cfec3483e3df5 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Thu, 20 Aug 2026 22:20:13 +0200
Subject: more tower migration stuff, prepare for cgit-public migration

---
 hosts/tower/network.nix | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

(limited to 'hosts/tower/network.nix')

diff --git a/hosts/tower/network.nix b/hosts/tower/network.nix
index fc0fdc5..09a97a3 100644
--- a/hosts/tower/network.nix
+++ b/hosts/tower/network.nix
@@ -1,7 +1,17 @@
-{ ... }:
+{ config, ... }:
 {
   networking = {
     hostName = "tower";
     networkmanager.enable = true;
+    firewall = {
+      checkReversePath = "loose";
+      trustedInterfaces = [ "tailscale0" ];
+      allowedUDPPorts = [ config.services.tailscale.port ];
+    };
+  };
+
+  services.tailscale = {
+    enable = true;
+    openFirewall = true;
   };
 }
-- 
cgit v1.3.1