fix: scope prometheus exporter firewall rules to home hosts only

Move allowedTCPPorts for node/ping/systemd/blackbox exporters from hosts/baseline.nix (applies to ALL hosts including linode) into modules/nixos/home.nix (applies only to greg.home = true hosts). This prevents ports 9100/9115/9427/9558 from being opened on linode, which is internet-facing. All LAN hosts set greg.home = true and will still get the ports opened; linode sets greg.home = false and will not.
2026-03-25 09:46:26 -05:00
parent df2f9d69fe
commit 4eebf07f6b
2 changed files with 9 additions and 6 deletions
@@ -114,12 +114,6 @@
    };
  };

-  networking.firewall.allowedTCPPorts = [
-    9100 # prometheus node exporter
-    9427 # prometheus ping exporter
-    9558 # prometheus systemd exporter
-  ];
-
  security.sudo.extraRules = [
    {
      users = [ "greg" ];