From 255f56072725de96d71ea294777cf59980eb7e82 Mon Sep 17 00:00:00 2001
From: Don Harper <duck@duckland.org>
Date: Mon, 22 Jun 2026 19:40:15 -0500
Subject: [PATCH] networking | add wt0 as trusted, add syncthing port

---
 hosts/common/networking.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/hosts/common/networking.nix b/hosts/common/networking.nix
index 973d25f..d4ab1c5 100644
--- a/hosts/common/networking.nix
+++ b/hosts/common/networking.nix
@@ -7,7 +7,7 @@
     dhcpcd.enable = false;
     firewall = {
       enable = true;
-      trustedInterfaces = ["tailscale0"];
+      trustedInterfaces = ["tailscale0" "wt0"];
       checkReversePath = "loose";
       allowedUDPPorts = [config.services.tailscale.port];
       allowedTCPPortRanges = [
@@ -22,7 +22,7 @@
           to = 1764;
         }
       ];
-      allowedTCPPorts = [22 80 443];
+      allowedTCPPorts = [22 80 443 8384];
     };
     nameservers = [
       "1.1.1.1"