From 7e05a9438b3406361e4e42ad472eef84681e48e5 Mon Sep 17 00:00:00 2001
From: Ingolf Wagner <contact@ingolf-wagner.de>
Date: Wed, 6 Mar 2024 13:22:22 +0100
Subject: [PATCH] paperless accessible via wireguard

---
 nixos/machines/chungus/paperless.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nixos/machines/chungus/paperless.nix b/nixos/machines/chungus/paperless.nix
index acda414..7907d3e 100644
--- a/nixos/machines/chungus/paperless.nix
+++ b/nixos/machines/chungus/paperless.nix
@@ -1,7 +1,11 @@
 { config, ... }: {
+
   services.paperless = {
     enable = true;
   };
+
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ config.services.paperless.port ];
+
   services.nginx.virtualHosts."paperless.${config.networking.hostName}.private" = {
     extraConfig = ''
       allow ${config.tinc.private.subnet};