🎨 (hydrogen) declare the firewall's allowedTCPPorts in the services

(openssh's port is automatically opened by the module)

hosts/hydrogen/services/default.nix

@@ -6,4 +6,11 @@
     ./nginx
     ./ssh
   ];
+
+  networking.firewall = {
+    allowedTCPPorts = [
+      80 # http
+      443 # https / tls
+    ];
+  };
 }

hosts/hydrogen/system/networking/default.nix

@@ -8,14 +8,5 @@
 
     # domain name servers, use clouflare family
     nameservers = ["1.1.1.2" "1.0.0.2"];
-
-    # TODO: bouger ça à côté des applications
-    firewall = {
-      allowedTCPPorts = [
-        624 # ssh
-        80 # http
-        443 # https
-      ];
-    };
   };
 }