From db244e2927082e01b94549a82701628b831bdef6 Mon Sep 17 00:00:00 2001
From: "Chris (wolcen) Thompson" <chris@agaric.coop>
Date: Wed, 1 Oct 2025 08:43:55 -0400
Subject: [PATCH] Add connection sharing capability

---
 hosts/default/configuration.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/hosts/default/configuration.nix b/hosts/default/configuration.nix
index b04684d..1877c8c 100644
--- a/hosts/default/configuration.nix
+++ b/hosts/default/configuration.nix
@@ -209,7 +209,8 @@ in
   networking.firewall = {
     enable = true;
     allowedTCPPorts = [ 9003 ];
-    allowedUDPPorts = [ 51820 ];
+    # 53/67 temporarily allowed for connection sharing/dhcp
+    allowedUDPPorts = [ 53 67 51820 ];
     # if packets are still dropped, they will show up in dmesg
     logReversePathDrops = true;
     checkReversePath = "loose";
@@ -235,6 +236,7 @@ in
   # List packages installed in system profile. To search, run:
   # $ nix search wget
   environment.systemPackages = with pkgs; [
+    dnsmasq # temporarily allowed for connection sharing
     ansible # automation/software-defined-configuration tool
     binutils # gnu bin utils
     # conda # python environment management