From 2c8b67b8f9e7c5f09c39b60086f3741d5ba0d4e0 Mon Sep 17 00:00:00 2001
From: Patrick <patrick@failmail.dev>
Date: Fri, 27 Dec 2024 17:50:44 +0100
Subject: [PATCH] fix: firewall rules for forward

---
 flake.lock                  | 7 +++----
 hosts/nucnix/forwarding.nix | 2 +-
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/flake.lock b/flake.lock
index c3cbcde..29bf68f 100644
--- a/flake.lock
+++ b/flake.lock
@@ -1558,11 +1558,10 @@
       "locked": {
         "lastModified": 1734643696,
         "narHash": "sha256-W5JSWhhThI9erzhZmpHy1gZGwSxEGPKYmOUBEXH/WGA=",
-        "ref": "refs/heads/main",
+        "owner": "oddlama",
+        "repo": "nixos-extra-modules",
         "rev": "6a4736e0773a1852b0b6c5f71cbe96dd39c3caf1",
-        "revCount": 40,
-        "type": "git",
-        "url": "file:///home/patrick/repos/nix/nixos-extra-modules"
+        "type": "github"
       },
       "original": {
         "owner": "oddlama",
diff --git a/hosts/nucnix/forwarding.nix b/hosts/nucnix/forwarding.nix
index 56c9212..678772c 100644
--- a/hosts/nucnix/forwarding.nix
+++ b/hosts/nucnix/forwarding.nix
@@ -43,7 +43,7 @@ let
                 "home"
               ];
               to = [ service ];
-              "allowed${toUpper protocol}Ports" = ports;
+              "allowed${toUpper protocol}Ports" = if fport != null then [ fport ] else ports;
             };
           };
         };