From 5041d4d262bfebc0e1aa079ccc57b241f31885be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Mon, 7 Aug 2023 00:33:37 +0300
Subject: [PATCH] vno1-oh2: allow port 53

---
 hosts/vno1-oh2/configuration.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hosts/vno1-oh2/configuration.nix b/hosts/vno1-oh2/configuration.nix
index b95b86e..604aa08 100644
--- a/hosts/vno1-oh2/configuration.nix
+++ b/hosts/vno1-oh2/configuration.nix
@@ -197,5 +197,11 @@
         prefixLength = 24;
       }
     ];
+    firewall = {
+      allowedUDPPorts = [ 53 ];
+      allowedTCPPorts = [ 53 ];
+      logRefusedConnections = false;
+      checkReversePath = "loose"; # for tailscale
+    };
   };
 }