From 183b7e4ade6fbdcdeaa21932bb57b494bffbf5c0 Mon Sep 17 00:00:00 2001
From: Don Harper <duck@duckland.org>
Date: Mon, 13 Apr 2026 07:23:57 -0500
Subject: [PATCH] task | allow http/https on servers

---
 hosts/server/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hosts/server/default.nix b/hosts/server/default.nix
index cef37e5..4a4daf1 100644
--- a/hosts/server/default.nix
+++ b/hosts/server/default.nix
@@ -141,6 +141,7 @@ in {
         "cdrom"
         "mlocate"
         "networkmanager"
+        "podman"
         "scanner"
         "video"
         "wheel"
@@ -270,7 +271,7 @@ in {
         to = 1764;
       }
     ];
-    allowedTCPPorts = [22];
+    allowedTCPPorts = [22 80 443];
   };
 
   # This value determines the NixOS release from which the default