sys/nspawn: open dmz ports on firewall

1 files changed, 7 insertions, 3 deletions

diff --git a/sys/nspawn.nix b/sys/nspawn.nix
index 6f1558c..2f23cff 100644
--- a/sys/nspawn.nix
+++ b/sys/nspawn.nix
@@ -122,9 +122,13 @@ in
       };
     };
 
-    networking.firewall.interfaces.ve-dmz = {
-      allowedTCPPorts = [ cfg.mailHost.saslPort cfg.mailHost.lmtpPort ];
-      allowedUDPPorts = [ 67 ]; # DHCP
+    networking.firewall = {
+      allowedTCPPorts = [ 25 80 143 443 587 ];
+
+      interfaces.ve-dmz = {
+        allowedTCPPorts = [ cfg.mailHost.saslPort cfg.mailHost.lmtpPort ];
+        allowedUDPPorts = [ 67 ]; # DHCP
+      };
     };
   };
 }