From 54e56926d64a5989884c12a64cb3e05d6731782c Mon Sep 17 00:00:00 2001
From: Robin Raymond <robin@robinraymond.de>
Date: Fri, 11 Aug 2017 14:42:24 +0200
Subject: [PATCH] add firewall

---
 mail-server.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/mail-server.nix b/mail-server.nix
index 65d2b54..20e47c8 100644
--- a/mail-server.nix
+++ b/mail-server.nix
@@ -65,6 +65,12 @@ in
     enable = true;
   };
 
+  # firewall
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 25 143 587 ]; # < TODO: make this flexible
+  };
+
   imports = [ 
     ./mail-server/dovecot.nix  # dovecot
     ./mail-server/postfix.nix  # postfix