From 7bc316936c0718aaf51d7177ccde6a19a837f217 Mon Sep 17 00:00:00 2001
From: k3t <k3t@notquitek3t.xyz>
Date: Fri, 20 Mar 2026 06:08:35 -0600
Subject: [PATCH] whitelist port ranges on desktop

---
 modules/desktop-common.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/modules/desktop-common.nix b/modules/desktop-common.nix
index 8f09363..24e36e7 100755
--- a/modules/desktop-common.nix
+++ b/modules/desktop-common.nix
@@ -197,6 +197,15 @@
   };
   environment.etc."firefox/policies/policies.json".target = "librewolf/policies/policies.json";
 
+  networking.firewall = {
+    allowedTCPPortRanges = [
+      { from = 8000; to = 9000; }
+    ];
+    allowedUDPPortRanges = [
+      { from = 8000; to = 9000; }
+    ];
+  };
+
   security.pam.services.k3t.kwallet.enable = true;
   security.pam.services.k3t.kwallet.forceRun = true;
   users.users.k3t = {