From 40b2c821c86b1a4059360a9920fda53f968cf31d Mon Sep 17 00:00:00 2001
From: hektor <hektor.misplon@pm.me>
Date: Mon, 2 Feb 2026 19:43:07 +0100
Subject: [PATCH] fix: enable 'eetion' firewall

---
 hosts/eetion/default.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/hosts/eetion/default.nix b/hosts/eetion/default.nix
index 8de2019..5ee5d3a 100644
--- a/hosts/eetion/default.nix
+++ b/hosts/eetion/default.nix
@@ -26,6 +26,13 @@ in
 
   networking.hostName = hostName;
   networking.networkmanager.enable = true;
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [
+      80
+      443
+    ];
+  };
 
   users.users = {
     root.hashedPassword = "!";
@@ -48,7 +55,7 @@ in
       backend = "podman";
       containers.actualbudget = {
         image = "docker.io/actualbudget/actual-server:latest-alpine";
-        ports = [ "5006:5006" ];
+        ports = [ "80:5006" ];
         volumes = [ "/var/lib/actualbudget:/data" ];
       };
     };