networking

system/services/docker/ollama/default.nix

@@ -11,6 +11,16 @@
             ollama
         ];
 
+        networking.firewall.interfaces = {
+            "ve-traefik" = {
+                allowedTCPPorts = [ 11434 ];
+            };
+
+            "ve-openwebui" = {
+                allowedTCPPorts = [ 11434 ];
+            };
+        };
+
         virtualisation.oci-containers.containers.ollama = {
             image = "ollama/ollama:latest";
 

system/services/docker/pihole/default.nix

@@ -20,6 +20,12 @@
             mode = "0664";
         };
  
+        networking.firewall.interfaces = {
+            "ve-traefik" = {
+                allowedTCPPorts = [ 9001 ];
+            };
+        };
+
         virtualisation.oci-containers.containers.pihole = {
             image = "pihole/pihole:latest";
 

system/services/docker/portainer/default.nix

@@ -7,6 +7,12 @@
 
     config = lib.mkIf (config.sysconfig.docker.portainer.enable && config.sysconfig.docker.enable) {
 
+        networking.firewall.interfaces = {
+            "ve-traefik" = {
+                allowedTCPPorts = [ 9000 ];
+            };
+        };
+
         virtualisation.oci-containers.containers.portainer = {
             image = "portainer/portainer-ce:latest";