merge

modules/nixos/crowdsec/default.nix

@@ -58,11 +58,9 @@ in
         [ "${script}/bin/register-bouncer" ];
     };
 
-    networking = {
-      firewall = {
-        allowedTCPPorts = [ cfg.port ];
-        allowedUDPPorts = [ cfg.port ];
-      };
+    networking.firewall = mkIf cfg.openFirewall {
+      allowedTCPPorts = [ cfg.port ];
+      allowedUDPPorts = [ cfg.port ];
     };
   };
 }