From 56ca4a8a1f6505a90ebaf111060e342dfe83b715 Mon Sep 17 00:00:00 2001
From: blake <me@blakedheld.xyz>
Date: Tue, 7 Oct 2025 23:13:02 -0500
Subject: [PATCH] 68 current  2025-10-07 22:42:25  25.05.20251001.5b5be50 
 6.12.49                          *

---
 modules/homelab/services/gitea/default.nix | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/modules/homelab/services/gitea/default.nix b/modules/homelab/services/gitea/default.nix
index a212e7f..1b216ee 100644
--- a/modules/homelab/services/gitea/default.nix
+++ b/modules/homelab/services/gitea/default.nix
@@ -50,7 +50,6 @@ in
     # enable the gitea service
     services.gitea = {
       enable = true;
-      openFirewall = true;
       user = "gitea";
       group = "gitea";
       stateDir = data_dir;
@@ -71,8 +70,8 @@ in
     # override umask to make permissions work out
     systemd.services.gitea.serviceConfig = { UMask = lib.mkForce "0007"; };
 
-#    # open firewall
-#    networking.firewall.allowedTCPPorts = [ cfg.port ];
+    # open firewall
+    networking.firewall.allowedTCPPorts = [ cfg.port cfg.ssh_port ];
 
     # internal reverse proxy entry
     services.nginx.virtualHosts."gitea.snowbelle.lan" = {