From cf925ec50a1f72a34c92197696e0f56a99a94984 Mon Sep 17 00:00:00 2001
From: Wekuz <wekuz@duck.com>
Date: Sun, 23 Nov 2025 10:45:01 +0200
Subject: [PATCH] changed firewall and docker autoprune

---
 hosts/opti/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/hosts/opti/default.nix b/hosts/opti/default.nix
index 49990b4..f832b8d 100644
--- a/hosts/opti/default.nix
+++ b/hosts/opti/default.nix
@@ -37,7 +37,8 @@
   networking = {
     hostName = "opti";
     networkmanager.enable = true;
-    firewall.allowedTCPPorts = [ 22 ];
+    nftables.enable = true;
+    firewall.allowedTCPPorts = [ 22 80 443 ];
   };
 
   services.openssh = {
@@ -52,6 +53,8 @@
       autoPrune = {
         enable = true;
         dates = "weekly";
+        randomizedDelaySec = "30min";
+        flags = [ "--all" "--volumes" ];
       };
     };
   };