firewall allowing tinc on ymir

1 files changed, 5 insertions, 3 deletions

diff --git a/ymir.nix b/ymir.nix
index 69e18b72..4461bcdd 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -59,9 +59,11 @@ in {
     firewall = {
       enable = true;
       allowPing = true;
-      allowedTCPPorts = [ 22
-                          5222
-                          5269
+      allowedTCPPorts = [ 22 # ssh
+                          5222 # xmpp.s2c
+                          5269 # xmpp.s2s
+                          655 # tinc.yggdrasil
+                          656 # tinc.laeradhr
                         ];
       allowedUDPPortRanges = [ { from = 60000; to = 61000; } # mosh
                              ];