From 5f85e3520b9ad42354002c2a82c46c87fb9153dc Mon Sep 17 00:00:00 2001
From: nicknase27 <nick@nicknase27.com>
Date: Sun, 26 Jul 2026 11:59:40 +0200
Subject: [PATCH] Enable firewall

---
 hosts/hermes/configuration.nix | 13 ++++++++-----
 modules/services/caddy.nix     |  1 +
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/hosts/hermes/configuration.nix b/hosts/hermes/configuration.nix
index 57f0ba6..0988d39 100644
--- a/hosts/hermes/configuration.nix
+++ b/hosts/hermes/configuration.nix
@@ -27,8 +27,13 @@
     extraGroups = ["wheel"];
   };
 
-  programs.zsh = {
-    enable = true;
+  programs = {
+    zsh = {
+      enable = true;
+    };
+    git = {
+      enable = true;
+    };
   };
 
   environment.systemPackages = with pkgs; [
@@ -50,9 +55,7 @@
     btop
   ];
 
-  networking.firewall.enable = false;
-
-  networking.nftables.enable = true;
+  networking.firewall.enable = true;
 
   age.identityPaths = [
     "/etc/ssh/id_ed25519"
diff --git a/modules/services/caddy.nix b/modules/services/caddy.nix
index df5cafa..d52baa6 100644
--- a/modules/services/caddy.nix
+++ b/modules/services/caddy.nix
@@ -6,6 +6,7 @@
 }: {
   services.caddy = {
     enable = true;
+    openFirewall = true;
     environmentFile = "/run/secrets/caddy.env";
     package = pkgs.caddy.withPlugins {
       plugins = ["github.com/caddy-dns/cloudflare@v0.2.4"];