From 2f5f1c0f083ce3aa5123fafecddbf693c07dffb0 Mon Sep 17 00:00:00 2001
From: Syndamia <kamen@syndamia.com>
Date: Sun, 7 Dec 2025 14:49:55 +0200
Subject: feat(ftp): Add active mode firewall exception

---
 modules/personal/default.nix | 2 ++
 modules/server/ftp.nix       | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

(limited to 'modules')

diff --git a/modules/personal/default.nix b/modules/personal/default.nix
index 1b28c00..9db866c 100644
--- a/modules/personal/default.nix
+++ b/modules/personal/default.nix
@@ -48,6 +48,8 @@
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
   networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
 
+  networking.firewall.allowedTCPPorts = [ 20 ];
+
   # zeroconf networking
   services.avahi = {
     enable = true;
diff --git a/modules/server/ftp.nix b/modules/server/ftp.nix
index b6af39e..31a7cf9 100644
--- a/modules/server/ftp.nix
+++ b/modules/server/ftp.nix
@@ -1,5 +1,5 @@
 {
-  networking.firewall.allowedTCPPorts = [ 21 ] ++ /* passive mode ports */ builtins.genList (x: x + 2100) 10;
+  networking.firewall.allowedTCPPorts = [ 20 21 ] ++ /* passive mode ports */ builtins.genList (x: x + 2100) 10;
   services.vsftpd = {
     enable = true;
     writeEnable = true;
-- 
cgit v1.3.1-23-gd82d