From 7455830a5ccede1808d0d7c71b766d682e3a65f0 Mon Sep 17 00:00:00 2001
From: Quinn Unger <quinn.unger@pm.me>
Date: Mon, 17 Aug 2026 18:35:48 +0100
Subject: [PATCH] close firewall ports for internal services

---
 hosts/tsumugi/arr/default.nix | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/hosts/tsumugi/arr/default.nix b/hosts/tsumugi/arr/default.nix
index 9d75e40..49798cb 100644
--- a/hosts/tsumugi/arr/default.nix
+++ b/hosts/tsumugi/arr/default.nix
@@ -33,16 +33,17 @@
 
     prowlarr = {
       enable = true;
-      openFirewall = true; # 9696
+      openFirewall = false; # 9696
+      settings.auth.method = "External";
     };
     bazarr = {
       enable = true;
-      openFirewall = true; # 6767
+      openFirewall = false; # 6767
     };
     seerr = {
       enable = true;
       port = 5055;
-      openFirewall = true;
+      openFirewall = false;
     };
 
     recyclarr = {
-- 
2.54.0