From 0eb14ba64fe023b179465e1c22085b11b1af8a14 Mon Sep 17 00:00:00 2001
From: Kiara Grouwstra <kiara@procolix.eu>
Date: Sun, 24 Aug 2025 20:04:02 +0200
Subject: [PATCH] reenable firewall

---
 deployment/check/common/targetNode.nix | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/deployment/check/common/targetNode.nix b/deployment/check/common/targetNode.nix
index 609a3366..689fe08d 100644
--- a/deployment/check/common/targetNode.nix
+++ b/deployment/check/common/targetNode.nix
@@ -41,10 +41,8 @@ in
         settings.PermitRootLogin = "yes";
       };
 
-      networking = {
-        firewall.enable = false;
-        enableIPv6 = false;
-      };
+      networking.firewall.allowedTCPPorts = [ 22 ];
+      networking.enableIPv6 = false;
 
       ## Test VMs don't have a bootloader by default.
       # boot.loader = {