Enable firewall

hosts/hermes/configuration.nix

@@ -27,8 +27,13 @@
     extraGroups = ["wheel"];
   };
 
-  programs.zsh = {
+  programs = {
-    enable = true;
+    zsh = {
+      enable = true;
+    };
+    git = {
+      enable = true;
+    };
   };
 
   environment.systemPackages = with pkgs; [
@@ -50,9 +55,7 @@
     btop
   ];
 
-  networking.firewall.enable = false;
+  networking.firewall.enable = true;
-
-  networking.nftables.enable = true;
 
   age.identityPaths = [
     "/etc/ssh/id_ed25519"

modules/services/caddy.nix

@@ -6,6 +6,7 @@
 }: {
   services.caddy = {
     enable = true;
+    openFirewall = true;
     environmentFile = "/run/secrets/caddy.env";
     package = pkgs.caddy.withPlugins {
       plugins = ["github.com/caddy-dns/cloudflare@v0.2.4"];