From 99a6b407760049d28b694acc043826c95a07bf00 Mon Sep 17 00:00:00 2001
From: mjallen18 <matt.l.jallen@gmail.com>
Date: Fri, 13 Feb 2026 18:18:40 -0600
Subject: [PATCH] idk

---
 .../services/nebula-lighthouse/default.nix    | 20 +++++++++++++++
 modules/nixos/services/nebula/default.nix     | 25 +++++++++++++++++++
 2 files changed, 45 insertions(+)

diff --git a/modules/nixos/services/nebula-lighthouse/default.nix b/modules/nixos/services/nebula-lighthouse/default.nix
index db94b46..c10f007 100644
--- a/modules/nixos/services/nebula-lighthouse/default.nix
+++ b/modules/nixos/services/nebula-lighthouse/default.nix
@@ -42,6 +42,26 @@ let
           # lighthouses = [
           #   "10.1.1.1"
           # ];
+          settings = {
+            firewall = {
+              outbound = [
+                {
+                  # Allow all outbound traffic from this node
+                  port = "any";
+                  proto = "any";
+                  host = "any";
+                }
+              ];
+              inbound = [
+                {
+                  # Allow all outbound traffic from this node
+                  port = "any";
+                  proto = "any";
+                  host = "any";
+                }
+              ];
+            };
+          };
         };
       };
     };
diff --git a/modules/nixos/services/nebula/default.nix b/modules/nixos/services/nebula/default.nix
index ac2c11d..135ff6e 100644
--- a/modules/nixos/services/nebula/default.nix
+++ b/modules/nixos/services/nebula/default.nix
@@ -32,6 +32,31 @@ let
           lighthouses = [
             "10.1.1.1"
           ];
+          staticHostMap = {
+            "10.1.1.1" = [
+              "mjallen.dev:4242"
+            ];
+          };
+          settings = {
+            firewall = {
+              outbound = [
+                {
+                  # Allow all outbound traffic from this node
+                  port = "any";
+                  proto = "any";
+                  host = "any";
+                }
+              ];
+              inbound = [
+                {
+                  # Allow all outbound traffic from this node
+                  port = "any";
+                  proto = "any";
+                  host = "any";
+                }
+              ];
+            };
+          };
         };
       };
     };