From f1d1da63c8b3a55a93ac33304b0036592522207b Mon Sep 17 00:00:00 2001
From: chn <chn@chn.moe>
Date: Wed, 13 Sep 2023 09:56:14 +0800
Subject: [PATCH] Revert "disable firewall for test"

This reverts commit 40d4d56d47a3add0e0ff62118b80c02c46c61fe9.
---
 modules/system/networking/nebula/default.nix | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/modules/system/networking/nebula/default.nix b/modules/system/networking/nebula/default.nix
index 4e07a2dd..149ee176 100644
--- a/modules/system/networking/nebula/default.nix
+++ b/modules/system/networking/nebula/default.nix
@@ -46,8 +46,7 @@ inputs:
         };
         secrets."nebula/key" = {};
       };
-      networking.firewall.enable = false;
-      # networking.firewall = { trustedInterfaces = [ "nebula.nebula" ]; }
-      #   // (if nebula.lighthouse != null then {} else { allowedTCPPorts = [ 4242 ]; allowedUDPPorts = [ 4242 ]; });
+      networking.firewall = { trustedInterfaces = [ "nebula.nebula" ]; }
+        // (if nebula.lighthouse != null then {} else { allowedTCPPorts = [ 4242 ]; allowedUDPPorts = [ 4242 ]; });
     };
 }