From 36cdaac5adeeac5130a875ea9a6c16f623faf2c9 Mon Sep 17 00:00:00 2001
From: Hektor Misplon <hektor.misplon@pm.me>
Date: Thu, 4 Dec 2025 12:47:39 +0100
Subject: [PATCH] refactor: enable firewall explicitely for 'hecuba' host

---
 hosts/hecuba/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/hosts/hecuba/default.nix b/hosts/hecuba/default.nix
index 69a31eb..30924f3 100644
--- a/hosts/hecuba/default.nix
+++ b/hosts/hecuba/default.nix
@@ -44,6 +44,10 @@
 
   security.sudo.wheelNeedsPassword = false;
 
+  networking = {
+    firewall.enable = true;
+  };
+
   services.openssh = {
     enable = true;
     harden = true;