From 55717be33ed7c08142cd4e9cb30c9f99638484d0 Mon Sep 17 00:00:00 2001
From: alydev <alyssa.dev.smith@gmail.com>
Date: Thu, 25 Sep 2025 18:01:26 +1000
Subject: [PATCH] update

---
 system/aly-server.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/system/aly-server.nix b/system/aly-server.nix
index ce87250..d4e2b98 100644
--- a/system/aly-server.nix
+++ b/system/aly-server.nix
@@ -1,5 +1,11 @@
 ({ config, pkgs, agenix, ... }: {
   networking.hostName = "aly-server";
+  networking.networkmanager.enable = true;
+  networking.firewall.allowedTCPPorts = [
+    80 443 3923 5656 5030 5031 50300
+    4747 8989 7878 8686 13378 6767 9696 4545
+    52568
+  ];
   services.openvpn.servers = {
     server = { config = '' config /home/aly/.secrets/server.ovpn ''; };
   };
@@ -21,8 +27,6 @@
   programs.nixvim.defaultEditor = true;
   security.sudo.wheelNeedsPassword = false;
 
-  networking.networkmanager.enable = true;
-
   time.timeZone = "Australia/Brisbane";
   users.users.aly = {
     isNormalUser = true;
@@ -45,6 +49,7 @@
   services.samba-wsdd.enable = true;
   services.samba = {
     enable = true;
+    openFirewall = true;
     settings = {
       global = {
         "workgroup" = "WORKGROUP";