From d2e73d80ffefa8c1c9cd481cae110b281e26c793 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Tue, 24 Oct 2023 18:59:19 +0200
Subject: [PATCH] fix nginx + firewall

---
 modules/flake-module.nix       | 1 +
 modules/nixos-wiki/default.nix | 1 +
 2 files changed, 2 insertions(+)

diff --git a/modules/flake-module.nix b/modules/flake-module.nix
index c4e16f6..4f0a296 100644
--- a/modules/flake-module.nix
+++ b/modules/flake-module.nix
@@ -2,6 +2,7 @@
   flake.nixosModules = {
     hcloud.imports = [
       inputs.srvos.nixosModules.server
+      inputs.srvos.nixosModules.mixins-nginx
       inputs.sops-nix.nixosModules.sops
       inputs.srvos.nixosModules.hardware-hetzner-cloud
       ./single-disk.nix
diff --git a/modules/nixos-wiki/default.nix b/modules/nixos-wiki/default.nix
index 4c032ba..e492810 100644
--- a/modules/nixos-wiki/default.nix
+++ b/modules/nixos-wiki/default.nix
@@ -101,6 +101,7 @@
       '';
     };
 
+    networking.firewall.allowedTCPPorts = [ 443 80 ];
     security.acme.acceptTerms = true;
     services.nginx.virtualHosts.${config.services.mediawiki.nginx.hostName} = {
       enableACME = lib.mkDefault true;