network: enable firewall

modules/services/nignx.nix

@@ -14,6 +14,17 @@
         listen [::]:8443 ssl;
       '';
     };
+
+    virtualHosts."napcat.colorsky.fun" = {
+      forceSSL = true;
+      useACMEHost = "colorsky.fun";
+      locations."/".proxyPass = "http://localhost:6099";
+
+      extraConfig = ''
+        listen [::]:8443 ssl;
+      '';
+    };
+
     virtualHosts."192.168.68.59" = { };
   };
 

modules/system/networking.nix

@@ -4,7 +4,15 @@
 
   networking = {
     hostName = "macmini";
-    firewall.enable = false;
     networkmanager.enable = true;
   };
+
+  networking.firewall = {
+    enable = true;
+    allowPing = true;
+    allowedTCPPorts = [
+      22
+      8443
+    ];
+  };
 }

modules/system/nix.nix

@@ -8,6 +8,6 @@
     enable = true;
     clean.enable = true;
     clean.extraArgs = "--keep-since 4d --keep 3";
-    flake = "/home/user/my-nixos-config"; # sets NH_OS_FLAKE variable for you
+    flake = "/home/sky/nixos/";
   };
 }