hopefully fix gitea runner firewall issue

modules/services/gitea.nix

@@ -46,4 +46,7 @@
       group = "gitea-runner";
     };
   };
+  networking.firewall = {
+      allowedTCPPorts = [3000];
+    };
 }

modules/system/networking.nix

@@ -4,6 +4,7 @@
     nameservers = ["1.1.1.1" "1.0.0.1"];
     firewall = {
       enable = true;
+      trustedInterfaces = [ "podman0" ];
     };
     nftables = {
       enable = true;