From a059476fc7f4b4ee6a77de313e6902efc6485999 Mon Sep 17 00:00:00 2001
From: "Simon R. - fantomitechno" <me@fantomitechno.dev>
Date: Fri, 26 Jun 2026 15:23:12 +0200
Subject: [PATCH] =?UTF-8?q?=E2=9C=A8=20firewalling=20my=20firewall?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 modules/nas/default.nix | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/modules/nas/default.nix b/modules/nas/default.nix
index e418c03..cda73a6 100644
--- a/modules/nas/default.nix
+++ b/modules/nas/default.nix
@@ -13,4 +13,25 @@
     #
     # '';
   };
+
+  networking.firewall = {
+    enable = true;
+    # for NFSv3; view with `rpcinfo -p`
+    allowedTCPPorts = [
+      111
+      2049
+      4000
+      4001
+      4002
+      20048
+    ];
+    allowedUDPPorts = [
+      111
+      2049
+      4000
+      4001
+      4002
+      20048
+    ];
+  };
 }
-- 
2.54.0