Fix ports firewall

modules/nixos/system/network/base/default.nix

@@ -4,6 +4,15 @@
     useDHCP = true;
     nameservers = [ "1.1.1.1" "9.9.9.9" ];
 
-    firewall = { enable = true; };
+    firewall = { 
+      enable = true;
+      allowedUDPPorts = 
+        (if config.syscfg.server ? wireguard then [ 1515 ] else [ ]) ++ 
+        [ ];
+
+      allowedTCPPorts = 
+        (if config.syscfg.server ? web       then [ 80 443 22 ] else [ ]) ++ 
+        [ ];
+    };
   };
 }

modules/shared/syscfg/default.nix

@@ -118,6 +118,10 @@ let
       type = type.bool;
       default = false;
     };
+    web = mkOption {
+      type = type.bool;
+      default = false;
+    };
     nftables = {
       enable = mkOption {
         type = type.bool;

systems/gateway/cfg.nix

@@ -29,6 +29,7 @@
     server = {
       openssh = true;
       wireguard = true;
+      web = true;
       nftables = {
         enable = true;
         ifs = ["ens3" "wg0" ];