feat: Athena Firewall

2026-08-05 16:15:49 +02:00
parent f5f8e88966
commit c7392f2dd9
2 changed files with 9 additions and 0 deletions
@@ -0,0 +1,8 @@
+_: {
+  # Athena (local AI): allow LAN access to the Hermes web dashboard.
+  # Bound to 0.0.0.0:9119 in the athena docker stack; NixOS default-deny
+  # firewall otherwise blocks inbound connections from other devices.
+  networking.firewall.allowedTCPPorts = [
+    9119 # athena hermes dashboard
+  ];
+}