From 4695bfe9b6302cd5199b377d791bf0aa27f21272 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Wed, 4 Nov 2015 15:05:25 +0100
Subject: firewall allowing tinc on ymir

---
 ymir.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/ymir.nix b/ymir.nix
index 69e18b72..4461bcdd 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -59,9 +59,11 @@ in {
     firewall = {
       enable = true;
       allowPing = true;
-      allowedTCPPorts = [ 22
-                          5222
-                          5269
+      allowedTCPPorts = [ 22 # ssh
+                          5222 # xmpp.s2c
+                          5269 # xmpp.s2s
+                          655 # tinc.yggdrasil
+                          656 # tinc.laeradhr
                         ];
       allowedUDPPortRanges = [ { from = 60000; to = 61000; } # mosh
                              ];
-- 
cgit v1.2.3