From 4fc6240dd8d231dc777104fb04924a9a3cdbf7ca Mon Sep 17 00:00:00 2001
From: "Simon R. - fantomitechno" <me@fantomitechno.dev>
Date: Fri, 2 Oct 2026 00:11:08 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=A7=B1=20firewalled?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 modules/desktop-apps/default.nix | 18 +++++++++++++++++-
 modules/games.nix                | 24 +++++++++++++++++++++++-
 2 files changed, 40 insertions(+), 2 deletions(-)

diff --git a/modules/desktop-apps/default.nix b/modules/desktop-apps/default.nix
index 4dc35da..02629ea 100644
--- a/modules/desktop-apps/default.nix
+++ b/modules/desktop-apps/default.nix
@@ -1,4 +1,9 @@
-{ pkgs, flakes, ... }:
+{
+  pkgs,
+  flakes,
+  lib,
+  ...
+}:
 let
   renogare = pkgs.callPackage ../../packages/renogare-font.nix { inherit pkgs; };
 in
@@ -38,6 +43,17 @@ in
     flakes.inputs.helium.packages.${system}.default
   ];
 
+  networking.firewall = {
+    # 1714-1764
+    enable = lib.mkDefault true;
+    allowedTCPPortRanges = [
+      {
+        from = 1714;
+        to = 1764;
+      }
+    ];
+  };
+
   fonts = {
     fontconfig.enable = true;
     packages = with pkgs; [
diff --git a/modules/games.nix b/modules/games.nix
index 6c12857..8272bb4 100644
--- a/modules/games.nix
+++ b/modules/games.nix
@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ pkgs, lib, ... }:
 {
   programs = {
     # Gayming
@@ -35,6 +35,28 @@
     moonlight-qt
   ];
 
+  networking.firewall = {
+    enable = lib.mkDefault true;
+    allowedTCPPorts = [
+      47984
+      47989
+      47990
+      47998
+      47999
+      48000
+      48010
+    ];
+    allowedUDPPorts = [
+      47984
+      47989
+      47990
+      47998
+      47999
+      48000
+      48010
+    ];
+  };
+
   home-manager.users."fantomitechno" =
     {
       ...
-- 
2.51.2