fix: centralise the ports

applications/dns.nix

@@ -67,6 +67,11 @@ in {
       group = "named";
     };
 
+    networking.firewall = {
+      allowedTCPPorts = [53];
+      allowedUDPPorts = [53];
+    };
+
     services.bind = {
         enable = true;
 

machines/_base.nix

@@ -26,6 +26,9 @@
 
 
   networking = {
+    # every sever needs to be accessable over ssh for admin use at least
+    firewall.allowedTCPPorts = [22];
+
     # explisitly stating this is good
     defaultGateway = "193.1.99.65";
 

machines/vendetta.nix

@@ -50,11 +50,6 @@ in {
         ];
       };
     };
-
-    firewall = {
-      allowedTCPPorts = [22 53];
-      allowedUDPPorts = [53];
-    };
   };
 
   # open the firewall for this

machines/vigil.nix

@@ -34,13 +34,6 @@ in {
     tags = [ "active" "dns" ];
   };
 
-  networking = {
-    firewall = {
-      allowedTCPPorts = [22 53];
-      allowedUDPPorts = [53];
-    };
-  };
-
   # open the firewall for this
   skynet_firewall.forward = [
     "ip daddr ${ip_pub} tcp dport 53 counter packets 0 bytes 0 accept"