ports refactor

2026-03-21 11:54:40 -04:00
parent 5ced648bd6
commit a5f3af5ff3
32 changed files with 264 additions and 128 deletions
--- a/services/caddy.nix
+++ b/services/caddy.nix
@@ -113,14 +113,14 @@ in
  systemd.packages = with pkgs; [ nssTools ];

  networking.firewall.allowedTCPPorts = [
-    service_configs.ports.https
+    service_configs.ports.public.https.port

    # http (but really acmeCA challenges)
-    service_configs.ports.http
+    service_configs.ports.public.http.port
  ];

  networking.firewall.allowedUDPPorts = [
-    service_configs.ports.https
+    service_configs.ports.public.https.port
  ];

  # Protect Caddy basic auth endpoints from brute force attacks