Merge pull request #233 from naturallaw777/copilot/fix-99053422-1193689005-4a507209-0427-496c-b028-fcf5e0d153d0

[WIP] Move hardcoded firewall ports from configuration.nix to their respective modules

configuration.nix

@@ -31,8 +31,7 @@
   networking.hostName = "nixos";
   networking.networkmanager.enable = true;
   networking.firewall.enable = true;
-  networking.firewall.allowedTCPPorts = [ 8448 3051 ];
-  networking.firewall.allowedUDPPorts = [ 8448 3051 5353 ];
+  networking.firewall.allowedUDPPorts = [ 5353 ];
 
   # ── Avahi (mDNS) ───────────────────────────────────────────
   services.avahi = {

modules/bitcoinecosystem.nix

@@ -99,6 +99,9 @@ lib.mkIf config.sovran_systemsOS.services.bitcoin {
     '';
   };
 
+  networking.firewall.allowedTCPPorts = [ 3051 ];
+  networking.firewall.allowedUDPPorts = [ 3051 ];
+
    sovran_systemsOS.domainRequirements = [
     { name = "btcpayserver"; label = "BTCPay Server"; example = "pay.yourdomain.com"; }
   ];

modules/core/sovran-hub.nix

@@ -375,7 +375,7 @@ in
 
     environment.systemPackages = [ sovran-hub-web ];
 
-    networking.firewall.allowedTCPPorts = [ 3051 8937 60847 ];
+    networking.firewall.allowedTCPPorts = [ 8937 60847 ];
 
     # ── Auto-launch Hub in browser on login ───────────────────────
     environment.etc."xdg/autostart/sovran-hub-autolaunch.desktop".text = ''

modules/synapse.nix

@@ -251,6 +251,9 @@ CREDS
     '';
   };
 
+  networking.firewall.allowedTCPPorts = [ 8448 ];
+  networking.firewall.allowedUDPPorts = [ 8448 ];
+
   sovran_systemsOS.domainRequirements = [
     { name = "matrix"; label = "Matrix Synapse"; example = "matrix.yourdomain.com"; }
   ];