From 3ffe2ffb31a234730f16be42ef10b7ad96abba5c Mon Sep 17 00:00:00 2001
From: Romain Paquet <rpqt@rpqt.fr>
Date: Wed, 29 Oct 2025 12:50:12 +0100
Subject: [PATCH] prometheus: open web interface firewall on vpn

---
 machines/genepi/monitoring/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/machines/genepi/monitoring/default.nix b/machines/genepi/monitoring/default.nix
index 3cd9c37..e5a3e88 100644
--- a/machines/genepi/monitoring/default.nix
+++ b/machines/genepi/monitoring/default.nix
@@ -2,4 +2,8 @@
   imports = [
     ./grafana.nix
   ];
+
+  networking.firewall.interfaces."zts7mq7onf".allowedTCPPorts = [
+    9090 # prometheus web interface
+  ];
 }