From 4078230052bc16fc84cab9a6acb52fce45365515 Mon Sep 17 00:00:00 2001
From: beatzaplenty <wayne.bennett@live.com>
Date: Mon, 13 Jul 2026 02:05:13 +1000
Subject: [PATCH] removed port from firewall

---
 hosts/docker/configuration.nix |  1 -
 hosts/server/configuration.nix | 23 +++++------------------
 2 files changed, 5 insertions(+), 19 deletions(-)

diff --git a/hosts/docker/configuration.nix b/hosts/docker/configuration.nix
index bd16de7..e88794e 100644
--- a/hosts/docker/configuration.nix
+++ b/hosts/docker/configuration.nix
@@ -28,7 +28,6 @@
     nfs-utils
     ];
   boot.supportedFilesystems = [ "nfs" ];
-  #services.rpcbind.enable = true;
   systemd.tmpfiles.rules = [
     "L+ /home/nixos/docker - - - - /mnt/docker/config"
     "d /mnt/docker 0755 nixos users -"
diff --git a/hosts/server/configuration.nix b/hosts/server/configuration.nix
index c16b42c..bd8af46 100644
--- a/hosts/server/configuration.nix
+++ b/hosts/server/configuration.nix
@@ -26,20 +26,7 @@
   boot.supportedFilesystems = [ "zfs" ];
   boot.zfs.forceImportRoot = false;
   boot.zfs.package = pkgs.zfs_unstable;
-  #boot.zfs.enabled = true;
-  # Mount server data
-  #fileSystems."/srv" = {
-  #  device = "/dev/disk/by-label/server-data";
-  #  fsType = "ext4";
-  #  options = [ "defaults" ];
-  #};
-
-  #fileSystems."/backup" = {
-  #  device = "/dev/disk/by-label/backup-data";
-  #  fsType = "ext4";
-  #  options = [ "defaults" ];
-  #};
-
+  
 services.beszel.agent.environment = {
 #DOCKER_HOST = "tcp://docker-socket-proxy:2375";
 #HUB_URL = "http://docker.sweet.home:8090";
@@ -87,8 +74,8 @@ services.nfs.server = {
     '';
 };
 
-  security.sudo = {
-    enable = true;
+  # security.sudo = {
+  #   enable = true;
 #    extraRules = [
 #      {
 #        users = [ "nixos" ];
@@ -100,7 +87,7 @@ services.nfs.server = {
 #        ];
 #      }
 #    ];
-  };
+  # };
 
 
  # systemd.services.backup = {
@@ -163,7 +150,7 @@ services.nfs.server = {
 
 #  services.openssh.settings.PermitRootLogin = "yes";
   # Open ports in the firewall.
-  networking.firewall.allowedTCPPorts = [ 2049 ];
+#  networking.firewall.allowedTCPPorts = [ 2049 ];
 #  networking.firewall.allowedUDPPorts = [ 111 2049 20048 ];
   # Or disable the firewall altogether.
   # networking.firewall.enable = false;