From 431c44e33528f52a472062d94223501db3657a60 Mon Sep 17 00:00:00 2001
From: Stefan Junker <mail@stefanjunker.de>
Date: Tue, 13 Nov 2018 00:54:04 +0100
Subject: [PATCH] nix/os/devices/CFB4ED74: add syncthing and firewall

---
 nix/os/devices/CFB4ED74/pkg.nix    | 5 +++++
 nix/os/devices/CFB4ED74/system.nix | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/nix/os/devices/CFB4ED74/pkg.nix b/nix/os/devices/CFB4ED74/pkg.nix
index 43091a2..b9a638e 100644
--- a/nix/os/devices/CFB4ED74/pkg.nix
+++ b/nix/os/devices/CFB4ED74/pkg.nix
@@ -4,4 +4,9 @@
 
 {
   home-manager.users.steveej = import ../../../home-manager/configuration/text-minimal.txt;
+
+  services.syncthing = {
+    enable = true;
+    openDefaultPorts = true;
+  };
 }
diff --git a/nix/os/devices/CFB4ED74/system.nix b/nix/os/devices/CFB4ED74/system.nix
index ed8cd1a..f401d6e 100644
--- a/nix/os/devices/CFB4ED74/system.nix
+++ b/nix/os/devices/CFB4ED74/system.nix
@@ -10,7 +10,7 @@ in {
   # TASK: new device
   networking.hostName = "CFB4ED74"; # Define your hostname.
 
-  networking.firewall.enable = lib.mkForce false;
+  networking.firewall.enable = true;
 
   # Kubernetes
   # services.kubernetes.roles = ["master" "node"];