From c89551c6106dbe5fce631e234c1ca95a999c551e Mon Sep 17 00:00:00 2001
From: Sebastien Bourdeauducq <sb@m-labs.hk>
Date: Sat, 15 Jul 2023 14:23:06 +0800
Subject: [PATCH] nixbld: open strongswan ports

---
 nixbld-etc-nixos/configuration.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index f7227012..ee502d1b 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -91,7 +91,7 @@ in
     hostId = "e423f012";
     firewall = {
       allowedTCPPorts = [ 53 80 443 7402 ];
-      allowedUDPPorts = [ 53 67 ];
+      allowedUDPPorts = [ 53 67 500 4500 ];
       trustedInterfaces = [ netifLan ];
     };
     interfaces."${netifWan}".useDHCP = true;