machines/dev/fedi203/woodpecker.nix

@@ -203,19 +203,19 @@
 
   networking = {
     nftables.enable = lib.mkForce false;
-    firewall = {
+  };
-      allowedTCPPorts = [
+
+  networking.firewall.allowedTCPPorts = [
     22
     80
     443
   ];
-      # needed for podman to be able to talk over dns
+
-      interfaces."podman0" = {
+  # This is needed for podman to be able to talk over dns
+  networking.firewall.interfaces."podman0" = {
     allowedUDPPorts = [ 53 ];
     allowedTCPPorts = [ 53 ];
   };
-    };
-  };
 
   virtualisation.podman = {
     enable = true;
@@ -231,7 +231,7 @@
   };
 
   systemd.services = {
-    woodpecker-agent-docker = {
+    woodpecker-agent-docker = lib.mkIf config.services.woodpecker-agents.agents.docker.enable {
       wants = [ "podman.socket" ];
       after = [ "podman.socket" ];
       serviceConfig = {