nftables: allow gemini output

diff --git a/machines/losurdo/networking/nftables.nix b/machines/losurdo/networking/nftables.nix
index 291c97da9a7c8a138bf3c20b93e110373e014d34..1685d5a8b583e2e4ba32045ef2a3ef19c912d8d2 100644 (file)
--- a/machines/losurdo/networking/nftables.nix
+++ b/machines/losurdo/networking/nftables.nix
@@ -78,6 +78,7 @@ networking.nftables = {
       chain fw2net {
         tcp dport { 80, 443 } counter accept comment "HTTP"
         udp dport 123 skuid ${users.systemd-timesync.name} counter accept comment "NTP"
+        tcp dport 1965 counter accept comment "Gemini"
         tcp dport 9418 counter accept comment "Git"
 
         # Some .nix append rules here with: add rule inet filter fw2net ...