move firewall opening to nginx

hosts/default/configuration.nix

@@ -312,14 +312,10 @@
 
   # Open ports in the firewall.
   networking.firewall.allowedTCPPorts = [
-    80 # http
-    443 # https
     53317 # Localsend
     7791 # Pixelflut
   ];
   networking.firewall.allowedUDPPorts = [
-    80
-    443
     53317
   ];
   # Or disable the firewall altogether.

modules/websites/default.nix

@@ -119,6 +119,15 @@ in
 
         virtualHosts = hosts;
       };
+
+      networking.firewall.allowedTCPPorts = [
+        80 # http
+        443 # https
+      ];
+      networking.firewall.allowedUDPPorts = [
+        80 # http
+        443 # https
+      ];
     }
   );
 }